Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Self - Stored Cross Site Scripting (XSS) - monitor.php #2451

Closed
Loginsoft-Research opened this issue Jan 24, 2019 · 0 comments

Comments

@Loginsoft-Research
Copy link

commented Jan 24, 2019

Describe Your Environment

  • ZoneMinder v1.33.1
  • Installed from - ppa:iconnor/zoneminder-master

Describe the bug
A user can edit an existing monitor thereby modifying various misc properties, one of them being signal check color. There exists no input validation & output filtration, leaving it vulnerable to HTML Injection, XSS attack.

To Reproduce
Affected URL :
http://localhost/zm/index.php?view=monitor&tab=misc

Payload used - "><a href="javascript:alert('1')

  • Navigate to the Affected URL & modify the Signal check Color field with the provided payload & click on save.
  • Click on the color box, XSS would be triggered.

colour

Expected behavior

  • Proper escaping of special characters.

Debug Logs


None

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.