[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [FD] CVE-2024-30929: XSS Vulnerability in DerbyNet v9.0 via 'back' Parameter in playlist.php
From:       Valentin Lobstein via Fulldisclosure <fulldisclosure () seclists ! org>
Date:       2024-04-03 18:38:47
Message-ID: oi0H39_jKsaAPTN39blWyU82T1y3e98spSBIehvuG6bRkQwTVM9GtvKFJHczH7Hsyv688F05PEL1z1mYinTlqy611InHALz4xQX_LtKMMcM= () protonmail ! com
[Download RAW message or body]

CVE ID: CVE-2024-30929

Description:
A Cross-Site Scripting (XSS) vulnerability has been found in DerbyNet version 9.0, affecting \
the `playlist.php` component. This issue allows remote attackers to execute arbitrary code by \
exploiting the `back` parameter. The application does not properly sanitize the `back` \
parameter before it is rendered on the page, thereby allowing the injection and execution of \
arbitrary JavaScript code.

Vulnerability Type: Cross-Site Scripting (XSS)

Vendor of Product: DerbyNet - Available on GitHub: https://github.com/jeffpiazza/derbynet

Affected Product Code Base: DerbyNet - v9.0

Affected Component: playlist.php

Attack Type: Remote

Impact: Code execution

Attack Vectors:
The vulnerability can be exploited by crafting a URL that includes malicious JavaScript code as \
                part of the `back` parameter. An example of such a URL is:
- http://127.0.0.1:8000/playlist.php?back="><script>alert(1)</script>

This example demonstrates how an attacker could inject and execute JavaScript within the \
context of the webpage, leading to potential security risks such as session hijacking, \
phishing, or unauthorized actions performed on behalf of the user.

Discoverer: Valentin Lobstein

References:
- Official website: http://derbynet.com
- Source code on GitHub: https://github.com/jeffpiazza/derbynet
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/


[prev in list] [next in list] [prev in thread] [next in thread]