Lucene search
K

Flex CMS Persistent XSS Vulnerability

🗓️ 21 Aug 2010 00:00:00Reported by Cur53DType 
zdt
 zdt
🔗 0day.today👁 19 Views

Flex CMS Persistent XSS Vulnerability found in Blocks Optio

Code
=====================================
Flex CMS Persistent XSS Vulnerability
=====================================


AUTHOR : Cur53D
MAIL : Hyq6xx[at]gmail.com
DATE : 20,August,2010
Blog : www.Cur53D.dlstreet.net
Type : XSS
Greetz : Sid3^effects,D34D F0X TH3 BL4CKH4T,*L0rd CrusAd3r*,D4rk357,Sonic,Nishi,r4z0r

####################################################################################
About the Script:

FlexCMS is a user-friendly website content management system.? With FlexCMS you can easily build dynamic

websites within a matter of minutes with just the click of your mouse!? Maintain your web content,

navigation and even limit what groups or specific users can access, from anywhere in the world with just

a web browser!? With an emphasis on security and functionality, FlexCMS is a professional and robust

system suitable for any business or organization website.? Built on the PHP programming language and the

MySQL database, FlexCMS delivers superb performance on any size website.

Vendor:http://www.flexcms.com/

Demo? :http://www.flexcms3.com/
####################################################################################
XSS Vulnerability effects the Blocks Option

Go to the site,Registe and

Go to Edit Block Feature and insert this script and save it

"><script>alert("inj3ct0r")</script>



#  0day.today [2018-04-01]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Aug 2010 00:00Current
7.1High risk
Vulners AI Score7.1
19