Exploit phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities

[Exploiter]

EDB-ID

35198

Проверка EDB

1. Пройдено

Автор

HALIL DALABASMAZ

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2014-8954

Дата публикации

2014-11-10

# Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities
# Date: 08-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v1.0.5
# Vendor Link: http://codecanyon.net/item/phpsound-music-sharing-platform/9016117
# Software Test Link: http://phpsound.com/demo

# Vulnerabilities Description:

===Stored XSS===
Create a Playlist and then you can run any XSS payload on "Title" or "Description" input fields.

Sample Payload for Stored XSS: "><script>alert(document.cookie);</script>

Solution
Filter the input fields aganist to XSS attacks.

===

===Reflected XSS===

The URL parameter is "filter" not filtered. 

http://server/path/index.php?a=explore&filter=XSS

Sample Payload for XSS: </title><script>alert(document.cookie);</script>

Solution
Filter the parameter aganist to XSS attacks.
===