[0-DAY] Active.CMS Версия: 1.8.1 mutiple vulns

[swagcat228]

уязвимость была обнаружена в файле cms/kernel/insert.inc.php

недостаточная фильтрация переменной curPos приводит к сразу двум ошибкам

1 - раскрытие путей (передача GET параметра как массива)

2 - пассивная XSS

 

[rlz]

did you find any serious vulnerability in the CMS and what is average number customer base of the vulnerable CMS?

 

[swagcat228]

did you find any serious vulnerability in the CMS and what is average number customer base of the vulnerable CMS?

yes. i did.

this CMS is privat solution of one quite large (residents in at least 3 countries) data-hoster service.

 

[rlz]

yes. i did.

this CMS is privat solution of one quite large (residents in at least 3 countries) data-hoster service.

That is exactly what I meant! Amazing working on finding vulnerability on anything new?

 

[swagcat228]

That is exactly what I meant! Amazing working on finding vulnerability on anything new?

combine

 

[etc/passwd]

Почему не указал ссылку на оригинал темы?

 

[swagcat228]

Почему не указал ссылку на оригинал темы?

https://xss.pro/threads/39432/

Ок, исправил