Advanced Guestbook v1.0
Homepage:
http://www.sport-slo.net/
Affected files:
guestbook.php
-----------------------------------------------
XSS vuln on guestbook.php:
Data isn't sanatized before being submit to guestbook.txt and displayed onscreen. The code:
if($_POST['action'])
{
if($_POST['name'] && $_POST['form'])
{
$action = $_POST['name'] . "@" . $_POST['form'] . "@" . $ip . "@" . $date . "n";
$handler = fopen("guestbook.txt", "a");
fputs($handler, $action);
fclose($handler);
print "Thank you!";
For a PoC as your name or opinion put:
<script>alert('xss')</script>
It should also be noted that this script comes with the dir /guestbook/and inside that is the cjGuestbook v1.2. v1.3 (which is a newer version) of cj'sguestbook has XSS vulns which i've submitted before.
This information is provided for TESTING and LEGAL RESEARCH purposes only. All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum