Description
Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attackers to inject arbitrary web script or HTML via the (1) task parameter to elxis/index.php, and (2) PATH_INFO to elxis/administrator/index.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Elxis CMS 2009 - 'index.php?task' Cross-Site Scripting EDB-36406 · webapps · Dec 5, 2011 · verified
- Elxis CMS 2009 - 'administrator/index.php' URI Cross-Site Scripting EDB-36407 · webapps · Dec 5, 2011 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20111205 [DCA-2011-0014] - Elxis CMS Cross Site Script mailing-list
- 47073 third-party-advisory
- 77563 vdb-entry
- 50910 vdb-entry
- 77564 vdb-entry
- http://forum.elxis.org/index.php?PHPSESSID=v9i7kgmmb2554ldmlcmbj32ugjd0ngpc&topic=5144.msg43327#msg43327
- [oss-security] 20111231 Re: CVE-request: Elxis CMS two XSS-vulnerabilities mailing-list
- elxiscms-index-xss(71648) vdb-entry