New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ATutor – Multiple Cross-Site Scripting (XSS) #129
Comments
|
working on it, thx |
|
Issue is now patched In your report "upgrade to ATutor 2.2.3, or apply patch 0008 to ATutor 2.2.2 using the Patcher." Won't patch earlier versions. |
|
@bestshow Can you verify the fix? Does this vulnerability have CVE identifier? |
|
@fgeek Yes,this vulnerability was fixed. |
|
@bestshow In what version? CVE should be requested if none is available. I can request it. |
|
@fgeek Thanks,this vulnerability was assigned CVE-2017-6483. |
|
@bestshow In what version or commit was this fixed? CVE talks about 2.2.2 and it's latest. |
Product: ATutor
Download: https://github.com/atutor/ATutor
Vunlerable Version: 2.2.2 and probably prior
Tested Version: 2.2.2
Author: ADLab of Venustech
Advisory Details:
Multiple Cross-Site Scripting (XSS) were discovered in“ATutor 2.2.2”, which can be exploited to execute arbitrary code.
The vulnerabilities exist due to insufficient filtration of user-supplied data in the “lang_code” HTTP GET parameter passed to “ATutor-master/themes/default/admin/system_preferences/language_edit.tmpl.php” ,“ATutor-master/themes/mobile/admin/system_preferences/language_edit.tmpl.php” and “ATutor-master/themes/simplified_desktop/admin/system_preferences/language_edit.tmpl.php”urls. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
The exploitation examples below use the "alert()" JavaScript function to see a pop-up messagebox:
Poc:
(1)
http://localhost/.../ATutor-master/themes/default/admin/system_preferences/language_edit.tmpl.php?lang_code=%22%3E%3Cscript%3Ealert(1);%3C/script%3E%3C%22
(2)
http://localhost/.../ATutor-master/themes/mobile/admin/system_preferences/language_edit.tmpl.php?lang_code=%22%3E%3Cscript%3Ealert(1);%3C/script%3E%3C%22
(3)
http://localhost/.../ATutor-master/themes/simplified_desktop/admin/system_preferences/language_edit.tmpl.php?lang_code=%22%3E%3Cscript%3Ealert(1);%3C/script%3E%3C%22
The text was updated successfully, but these errors were encountered: