Campsite CMS - Remote Persistent Cross-Site Scripting



EKU-ID: 20862 CVE: OSVDB-ID:
Author: D4rk357 Published: 2010-07-15 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


#################################################################
# Exploit Title: Campsite CMS remote Persistent XSS vulnerability
# Date: 15th july 2010
# Author: D4rk357
# Critical:Low
# Contact:bd4rk357[at]yahoo[dot]in
# Software Link:bhttp://www.sourcefabric.org/en/home/web/78/Demo--Documentation.htm?tpl=18
# Greetz to:bb0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant
# Shoutz to: http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
##############################################################################

Login as Admin into the website .

GO to administration>Articles>Edit articles or any other option .

In heading or content type <marquee><h1>XSS3d By D4rk357</h1><marquee> .

  On the other hand a user using this CMS can upload a persistent XSS in this site while
  submitting a article using same method.

 ##################################################################################
 #D4rk357