| शीर्षक | Total.js CMS v19.9.0 Cross Site Scripting |
|---|
| विवरण | In CMS Total.js v19.9.0, a stored Cross-Site Scripting (XSS) vulnerability was identified that was exploitable through the file upload functionality available in the “Files” menu.
An authenticated attacker with administrative privileges can upload malicious files by manipulating the Content-Type to text/html and using arbitrary file extensions (e.g. .html). This way, it is possible to upload files containing injected JavaScript code.
As a proof of concept, an HTML file containing the following payload was uploaded:
<script>window.location.href='https://www.google.com/'</script>
When accessing the file hosted on the CMS, the JavaScript code is executed in the victim's browser, causing automatic redirection to a domain controlled by the attacker. The impact may include phishing and performing other malicious actions in accordance with the attacker's goals.
PoC example:
http://x.x.x.x:8000/download/JBMVZC1c561f.html?download=1
This behavior demonstrates that any user who accesses the malicious URL will have JavaScript code executed in their browser, allowing the attacker to exploit XSS for different purposes.
I will leave the PoC URL in the Consulting/Exploration field. If you do not agree, please let me know so that I can adapt as expected. Thank you in advance. |
|---|
| स्रोत | ⚠️ http://x.x.x.x:8000/download/JBMVZC1c561f.html?download=1 |
|---|
| उपयोगकर्ता | mirandaBR (UID 90010) |
|---|
| सबमिशन | 09/09/2025 08:46 PM (1 वर्ष पहले) |
|---|
| संयम | 26/09/2025 08:59 AM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325962 [Total.js CMS तक 19.9.0 Files Menu क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|