CVE-2010-2698
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when (1) editing a new blog, (2) adding an album, or (3) editing an album. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting
########################################################
# I'm SiD3^effects member from Inj3ct0r Team #
# Support e-mail : submit[at]inj3ct0r.com #
########################################################
Name : Sijio Community Software SQLi/Persistent XSS Vulnerability
Date : july, 7 2010
Critical Level : HIGH
Vendor Url : http://www.sijio.com/
Google Dork: © Powered by sijio - Community Software
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Xploit:SQLi Vulnerability
DEMO URL : http://server/gallery/?parent=[SQLi]
########################################################################################################
Xploit:Persistent XSS Vulnerability
The following script has persistent xss vuln in the blog section.
Step 1: Register :D
Step 2: Goto your blog section and post your new evil blog :P
Demo url :http://server/my_blogs/
Post your evil xss content in the blog section and the url is http://www.axlex.com/edit_blog/
Attack Pattern :">><marquee><h1>XSS3d By Sid3^effects</h1><marquee>
Step 3 : Now goto the main page,check the blog section and the url is http://www.axlex.com/blogs/ and find your evil script:P
The attacker can injected evil xss script in the blog section :D
########################################################################################################
# 0day no more
# Sid3^effects Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| sijio | community_software | | |
References
- http://osvdb.org/66154
- http://secunia.com/advisories/40492
- http://www.exploit-db.com/exploits/14260
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60176
- http://osvdb.org/66154
- http://secunia.com/advisories/40492
- http://www.exploit-db.com/exploits/14260
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60176
CWEs
CWE-79
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.