| tiêu đề | Portabilis i-Educar 2.9.0 Stored Cross Site Scripting |
|---|
| Mô tả | Hello team!
A Stored XSS vulnerability was identified in the “Nome” field within the Curricular Components module of i-Educar. An authenticated attacker can inject malicious JavaScript that will be executed each time the component list is accessed.
Vulnerability Type: Stored Cross-Site Scripting (XSS)
Affected Application: i-Educar
Vulnerable Endpoint: /module/ComponenteCurricular/edit?id=ID
Vulnerable Parameter: “Nome” field (stored via /intranet/educar_componente_curricular_lst.php)
PoC Step-by-Step
1 - Authentication: Log in to i-Educar with valid credentials.
2 - Access the "Escola" module: Navigate to: Escola > Cadastro > Componentes Curriculares URL: /intranet/educar_componente_curricular_lst.php
3 - Create or Edit "Componentes curriculares" Entry: Either create a new "Componentes curriculares" or edit an existing one.
4 - Edit Vulnerable Field "Nome": Go to: module/ComponenteCurricular/edit?id=ID image
5 - Insert Payload: In the “Nome” field, insert:
<script>alert('PoC VulDB i-Educar Pacxxx')</script>
6 - Save and Trigger: image
Recommendations & Mitigations
Input Sanitization: Reject or neutralize input containing scripts or HTML.
Output Encoding: Properly encode all user input before rendering in HTML.
Use of XSS Mitigation Libraries: Tools like OWASP Java Encoder, HTMLPurifier, or DOMPurify should be employed. |
|---|
| Nguồn | ⚠️ https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README15.md |
|---|
| Người dùng | RaulPACXXX (UID 84502) |
|---|
| Đệ trình | 27/06/2025 02:45 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 06/07/2025 07:41 (9 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 315024 [Portabilis i-Educar 2.9.0 Curricular Components edit?id=ID Nome Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|