ferretCMS– Multiple Cross-Site Scripting Vulnerability

[tigerboy07]

ferretCMS– Multiple Cross-Site Scripting Vulnerability

Information

Vulnerability Type : Cross Site Scripting Vulnerability
Vulnerable Version : 2.0.2-alpha
Vendor Homepage:https://github.com/JRogaishio/ferretCMS
CVE-ID :
Severity : Medium
Author – Sachin Wagh (@tiger_tigerboy)

Description

ferretCMS is prone to Cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code
in the browser of an unsuspecting user in the context of the affected site.

Proof of Concept URL

http://localhost/ferretCMS-master/admin.php

Parameter :

1.Username

http://localhost/ferretCMS-master/admin.php?type=customkey&action=insert&p=

Parameter :

1.key
2.value

http://localhost/ferretCMS-master/admin.php?type=template&action=insert&p=

Parameter :

1.path
2.file
3.title

Please find attached POC.

Advisory Timeline

02-Jan-2016-Reported

Credits & Authors

Sachin Wagh (@tiger_tigerboy)

[fgeek]

Could you create a patch for these issues and publish new release?

[JRogaishio]

I am more than happy to accept pull requests for this project.
As it stands, this projects has been abandoned and I don't have any new development planned.
Out of curiousity, are you using this CMS in production?

Also these parameters should be getting run through PDO prepared statements to sanitize the input.