PHP Jobsite 1.36 Cross Site Scripting

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Introduction:
=============
PHP-Jobsite v1.36 Content Management System. Recruitment software made Easy. 

PHP-Jobsite - Price US - $299

Software Overview:
- Run your own job software website or integrated into your corporate site
- control the software from everywhere you are using a browser and internet connection use multilingual 
options to display the language of your clients/users with some HTML and CSS knowledge you can change the 
template and have unique look and feel for clients/users
- Planning/Membership options - create plans for employer recruitment (jobs to post, featured jobs to post, 
resumes to contact), create free plans for limited periods or allow unlimited access (free site)
- Ecommerce - process Credit Card payments automatically with integrated payment gateways (Paypal, 2checkout, 
authorize.net, worldpay...etc. display your jobs on other sites with Advanced Cross Networking - RSS Feed, js or iframe

(Copy of the Vendor Homepage: http://www.scriptdemo.com/details/phpjobsite )


Abstract:
=========
The Vulnerability Laboratory Research Team discovered multiple Cross Site Scripting Vulnerabilities in the PHP Jobsite v1.36 Script.

Details:
========
Multiple non persistent cross site scripting vulnerabilities are detected in the PHP Recruitment software Jobsite v1.36.
The vulnerability allows remote attackers to hijack website customer, moderator or admin sessions with high required 
user inter action or local low privileged user account. The vulnerabilities are located in the Login and Change Skin module 
with the bound vulnerable ref & sk parameters.Successful exploitation can result in account steal, phishing & client-side content 
request manipulation.


Vulnerable Module(s): 
        [+] Login
        [+] Change Skin

Vulnerable Paramater(s): 
        [+] ref
        [+] sk


Proof of Concept:
=================
The vulnerabilities can be exploited by remote attackers without privileged user account & with medium or high
required user inter action. For demonstration or reproduce ...


[*] http://127.0.0.1:8080/script/error_login.php?auth_sess=b315a743d9db4abd26d7b060b57fb082&ref=[CROSS SITE SCRIPTING]
[*] http://127.0.0.1:8080/script/index.php??sk=[CROSS SITE SCRIPTING]


[*] 
http://127.0.0.1:8080/php-jobsite/demo/error_login.php?auth_sess=b315a743d9db4abd26d7b060b57fb082&ref="><img 
src=http://127.0.0.1:8080/images/200911/11/i8du12ievi9fh1a9rm-owned-headonfire.jpg onload=alert("VL"); />

[*] 
http://127.0.0.1:8080/php-jobsite/demo/?sk="><img src=http://www.izipik.com/images/200911/11/i8du12ievi9fh1a9rm-
owned-headonfire.jpg onload=alert("VL"); />


Risk:
=====
The security risk of the cross site scripting vulnerabilities are estiamted as medium(-).



#  0day.today [2018-01-03]  #