Exploit Phorum 3.x - 'profile.php?target' Cross-Site Scripting

[Exploiter]

EDB-ID

23820

Проверка EDB

1. Пройдено

Автор

JEIAR

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2004-1822

Дата публикации

2004-03-15

source: https://www.securityfocus.com/bid/9882/info
  
It has been reported that Phorum is prone to a cross-site scripting vulnerability across multiple modules. The issue presents itself across multiple modules including 'login.php', 'register.php', and 'profile.php'. These modules employ two hidden variables named 'f' and 'target', which are passed user-supplied input values from HTTP_REFERER without proper sanitization.
  
Phorum versions 5.0.3 Beta and prior are reported to be vulnerable to this issue.

profile.php?id=2&action=edit&target=[XSS]