OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
cjGuestbook v1.3 - XSS

lunyyoufucktard.com
Date: Tue Jun 20 2006 - 15:36:54 CDT


cjGuestbook v1.3

Homepage:
http://cmj-php.opanelhosting.com

Affected files:

* posting in the guestbook

XSS vuln with cookie disclosure:

cjGuestbook uses bbcode, and since theres a vulnerability in early editions of bbcode we can achieve our XSS example.

For a PoC put in as your comment:
[img]javascript:alert(document.cookie)[/img]

Screenshots:
http://www.youfucktard.com/xsp/cjgb1.jpg
http://www.youfucktard.com/xsp/cjgb2.jpg