Lucene search
Piyush Patil1337DAY-ID-36343HistoryJun 03, 2021 - 12:00 a.m.
FUDForum 3.1.0 - (srch) Reflected XSS Vulnerability
2021-06-0300:00:00
Piyush Patil
0day.today
24
fudforum
reflected xss
javascript injection
cve-2021-27519
cross-site scripting
remote attackers
index.php
search parameter
exploit
piyush patil
sourceforge
windows 10
kali
payload
steps to reproduce
EPSS
0.003
Percentile
70.0%
# Exploit Title: FUDForum 3.1.0 - 'srch' Reflected XSS
# Exploit Author: Piyush Patil
# Vendor Homepage: http://fudforum.org/
# Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum_3.1.0.zip/download
# Version: FUDForum 3.1.0
# Tested on: Windows 10 and Kali
# CVE : CVE-2021-27519
-Description:
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.
-Payload used:
x" onmouseover=alert(1) x="
-Steps to reproduce:
1- goto https://localhost/fudforum/index.php?t=search&
2- In "forum search" option, paste XSS payload
3- Hover your mouse to "x" and XSS will get triggered
Related
prion
prion
Cross site scripting
2021-03-19 19:15:00
osv
osv
CVE-2021-27519
2021-03-19 19:15:13
nvd
nvd
CVE-2021-27519
2021-03-19 19:15:13
exploitdb
exploitdb
FUDForum 3.1.0 - 'srch' Reflected XSS
2021-06-03 00:00:00
cve
cve
CVE-2021-27519
2021-03-19 19:15:13
cvelist
cvelist
CVE-2021-27519
2021-03-19 18:54:16
nuclei
nuclei
FUDForum 3.1.0 - Cross-Site Scripting
2022-05-31 09:16:01
packetstorm
packetstorm
FUDForum 3.1.0 Cross Site Scripting
2021-06-03 00:00:00