Persistent XSS in Abus Security Center - CVSS 8.0
Tim Schughart <[email protected]> Thu, 29 Sep 2016 16:49:21 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.bugtraq,gmane.comp.security.web-applications |
|---|---|
| Message-ID | <[email protected]> |
SGlAYWxsLCAKClByb2R1Y3Q6IEFidXMgU2VjdXJpdHkgQ2FtcyAKVmVuZG9yOkFidXMgR3JvdXAg IAoKSW50ZXJuYWwgcmVmZXJlbmNlOiAtIApWdWxuZXJhYmlsaXR5IHR5cGU6IENyb3NzIFNpdGUg U2NyaXB0aW5nIApWdWxuZXJhYmxlIHZlcnNpb246IDAxMDFhIGFuZCBwb3NzaWJsZSBvdGhlciB2 ZXJzaW9ucyBhZmZlY3RlZCAobm90IHRlc3RlZCkKVnVsbmVyYWJsZSBjb21wb25lbnQ6IEZUUApS ZXBvcnQgY29uZmlkZW5jZTogQ29uZmlybWVkClNvbHV0aW9uIHN0YXR1czogTm90IGZpeGVkIGJ5 IFZlbmRvciwgd2lsbCBub3QgcGF0Y2ggdGhlIHZ1bG4uIApGaXhlZCB2ZXJzaW9uczogLQpSZXNl YXJjaGVyIGNyZWRpdHM6IFRpbSBTY2h1Z2hhcnQgJiBLaGFuaCBRdW9jIFBoYW0gb2YgUHJvU2Vj IE5ldHdvcmtzClZlbmRvciBub3RpZmljYXRpb246IDIwMTYtMDktMjEKU29sdXRpb24gZGF0ZTog ClB1YmxpYyBkaXNjbG9zdXJlOiAyMDE2LTA5LTI5CkNWRSByZWZlcmVuY2U6IApDVlNTdjM6IDgu MCBBVjpBL0FDOkwvUFI6Ti9VSTpSL1M6VS9DOkgvSTpIL0E6SCA8aHR0cHM6Ly9udmQubmlzdC5n b3YvY3Zzcy92My1jYWxjdWxhdG9yP3ZlY3Rvcj1BVjpBL0FDOkwvUFI6Ti9VSTpSL1M6VS9DOkgv STpIL0E6SD4KClZ1bG5lcmFiaWxpdHkgRGV0YWlsczoKVGhlIGVudGVyZWQgdXNlcm5hbWUgdmlh IEZUUCBsb2dpbiBpcyByZWZsZWN0ZWQgdG8gdGhlIGxvZyB3aGljaCBpcyByZW5kZXJlZCBpbiB0 aGUgd2ViIGludGVyZmFjZSB3aXRob3V0IGlucHV0IHZhbGlkYXRpb24uIFRoaXMgcmVzdWx0cyBp biBhbiBzdWNjZXNzZnVsbCwgcGVyc2lzdGVudCwgWFNTLgoKUmlzazoKVGhyb3VnaCB0aGlzIHlv dSBhcmUgYWJsZSB0byBnZXQgZS5nLiB0aGUgc2Vzc2lvbiBjb29raWVzIG9mIHRoZSBjYW1zIGFk bWluaXN0cmF0b3IuIFNvIHlvdSBhcmUgYWJsZSB0byBnZXQgZnVsbCBhY2Nlc3MgLSBwZXJzaXN0 ZW50LiAKClBvQzogCkZUUCBVc2VybmFtZTogPHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUp PC9zY3JpcHQ+IApGVFAgUGFzczogYW55IAoKQnJvd3NlIHRvIGxvZyBhbmQgd2F0Y2ggdGhlIHBv cHVwIDopIAoKCkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNoZW4gR3LDvMOfZW4gCgpUaW0g U2NodWdoYXJ0IApDRU8gLyBHZXNjaMOkZnRzZsO8aHJlciAgCgotLQpQcm9TZWMgTmV0d29ya3Mg ZS5LLgpFbGxpbmdzaG9obCA4Mgo1NjA3NiBLb2JsZW56IAoKV2Vic2l0ZTogaHR0cHM6Ly93d3cu cHJvc2VjLW5ldHdvcmtzLmNvbSA8aHR0cDovL3d3dy5wcm9zZWMtbmV0d29ya3MuY29tLz4gCkUt TWFpbDogdC5zY2h1Z2hhcnRAcHJvc2VjLm5ldHdvcmtzLmNvbSA8bWFpbHRvOmluZm9AcHJvc2Vj Lm5ldHdvcmtzLmNvbT4gCk1vYmlsZTogKzQ5ICgwKTE1NyA3OTAxIDU4MjYKUGhvbmU6ICs0OSAo MCkyNjEgNDUwIDkzMCA5MAoKIlRoaXMgRS1NYWlsIGNvbW11bmljYXRpb24gbWF5IGNvbnRhaW4g Q09ORklERU5USUFMLCBQUklWSUxFR0VEIGFuZC9vciBMRUdBTExZIFBST1RFQ1RFRCBpbmZvcm1h dGlvbiBhbmQgaXMgaW50ZW5kZWQgb25seSBmb3IgdGhlIG5hbWVkIHJlY2lwaWVudChzKS4gQW55 IHVuYXV0aG9yaXplZCB1c2UsIGRpc3NlbWluYXRpb24sIGNvcHlpbmcgb3IgZm9yd2FyZGluZyBp cyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp ZW50IGFuZCBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgY29tbXVuaWNhdGlvbiBpbiBlcnJvciwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5LCBkZWxldGUgaXQgYW5kIGRlc3Ry b3kgYWxsIGNvcGllcyBvZiB0aGlzIEUtTWFpbC4gVkFUIElEOiBERTI5MDY1NDcxNCBsZWdhbCBk b21pY2lsZSBLb2JsZW56LCBIUkEgMjE2MjEu4oCcCgoiRGllc2UgRS1NYWlsIE1pdHRlaWx1bmcg a2FubiBWRVJUUkFVTElDSEUsIGRlbSBCRVJVRlNHRUhFSU1OSVMgVU5URVJMSUVHRU5ERSB1bmQv b2RlciBSRUNIVExJQ0ggR0VTQ0jDnFRaVEUgSW5mb3JtYXRpb25lbiBlbnRoYWx0ZW4gdW5kIGlz dCBhdXNzY2hsaWXDn2xpY2ggZsO8ciBkZW4vZGllIGdlbmFubnRlbiBBZHJlc3NhdGVuIGJlc3Rp bW10LiBKZWRlIHVuYmVmdWd0ZSBOdXR6dW5nLCBXZWl0ZXJnYWJlLCBWZXJ2aWVsZsOkbHRpZ3Vu ZyBvZGVyIFZlcnNlbmR1bmcgaXN0IHN0cmVuZ3N0ZW5zIHZlcmJvdGVuLiBTb2xsdGVuIFNpZSBu aWNodCBkZXIgYW5nZWdlYmVuZSBBZHJlc3NhdCBzZWluIHVuZCBkaWVzZSBFLU1haWwgTWl0dGVp bHVuZyBpcnJ0w7xtbGljaCBlcmhhbHRlbiBoYWJlbiwgaW5mb3JtaWVyZW4gU2llIGJpdHRlIHNv Zm9ydCBkZW4gQWJzZW5kZXIsIGzDtnNjaGVuIGRpZXNlIEUtTWFpbCB1bmQgdmVybmljaHRlbiBh bGxlIEtvcGllbi4gVVN0LUlkTnIuOiAgREUyOTA2NTQ3MTQsIEFtdHNnZXJpY2h0IEtvYmxlbnos IEhSQSAyMTYyMS4iCgoKCgoKCgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fClNlbnQgdGhyb3VnaCB0aGUgRnVsbCBEaXNjbG9zdXJlIG1haWxpbmcgbGlz dApodHRwczovL25tYXAub3JnL21haWxtYW4vbGlzdGluZm8vZnVsbGRpc2Nsb3N1cmUKV2ViIEFy Y2hpdmVzICYgUlNTOiBodHRwOi8vc2VjbGlzdHMub3JnL2Z1bGxkaXNjbG9zdXJlLw==