full-disclosure - [FD] CVE Request: Fiyo CMS 2.0.2.1

Open Source and information security mailing list archives

Message-ID: <CAAYZd=mTM9cy3itu8_FALtcPLtBJ+M2Fp9miSqm3Cy_27T=XLQ@mail.gmail.com>
Date: Mon, 22 Feb 2016 13:59:03 +0530
From: Himanshu Mehta <mehta.himanshu21@...il.com>
To: fulldisclosure@...lists.org, vuln@...unia.com, bugs@...uritytracker.com, 
 submissions@...ketstormsecurity.org
Subject: [FD] CVE Request: Fiyo CMS 2.0.2.1 - Multiple Persistent XSS
	Vulnerabilities

*1. Introduction*

Affected Product:      Fiyo CMS 2.0.2.1
Fixed in:                    Fiyo CMS 2.0.6
Fixed Version Link:
http://www.fiyo.org/blog/versi-2-0-6-banyak-perubahan-untuk-stabilitas
Vendor Website:       http://www.fiyo.org/
Vulnerability Type:    Persistent XSS
Remote Exploitable:  Yes
Reported to vendor:  28/12/2015
Fixed by Vendor:       15/01/2016
CVE:

*2. Overview*

There are multiple persistent XSS vulnerabilities in Fiyo CMS 2.0.2.1. The
vulnerabilities exist due to insufficient filtration of user-supplied data.
A remote attacker can execute arbitrary HTML and script code in browser in
context of the vulnerable application.

*3. Affected Modules*

Affected fields in the modules are listed below:

i. Users
User Group -> Group Name, Description

ii. Modules
Module Details->Judul Modul, Posisi

iii. Menus
Main Menu-> Menu Details->Nama
Footer Menu-> Menu Details->Nama
Categories->Menu Details->Judul Kategori
Admin Panel-> Menu Details->Nama

Attached POC.

*4. Payload*
<script>alert('XSS')</script>

*5. Credit*
Himanshu Mehta

*6. Tested By*
Himanshu Mehta and Sachin Wagh
mehta.himanshu21@...il.com
wsachin092@...il.com

Download attachment "Admin Panel_Menu Details_Nama_alert.png" of type "image/png" (405382 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives