Exploit PHP-Nuke 6.0/6.5 - Search Form Cross-Site Scripting

[Exploiter]

EDB-ID

21855

Проверка EDB

1. Пройдено

Автор

MARK GRIMES

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2002-09-24

source: https://www.securityfocus.com/bid/5788/info

PHPNuke 6.0 is prone to cross-site scripting attacks.

HTML tags are not filtered from links to the 'modules.php' script.

Reportedly, the problem lies in the 'Search' page of the 'modules.php' script. It is possible for a malicious attacker to submit a search string that contains HTML code. The value of this search string is not sanitized before it is included in PHP generated HTML and output to the client.

This attack may be used to steal a user's cookie-based authentication credentials for the vulnerable PHPNuke site.

<script>alert(document.cookie);</script>

It is possible to enter the above in the text field provided by the 'Search' page.