Headline

CVE-2023-29720: [Vuln]There is a reflected XSS vulnerability. · Issue #26 · bellenuit/sofawiki

SofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.

1 year ago

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Pick a username

Email Address

Password

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Closed

xul18 opened this issue

Mar 15, 2023

· 1 comment

Closed

[Vuln]There is a reflected XSS vulnerability. #26

xul18 opened this issue

Mar 15, 2023

· 1 comment

Comments

Copy link

xul18 commented

Mar 15, 2023

The variable name is being sanitized for XSS using the function swSimpleSanitize().

// index.php $name = swGetArrayValue($_REQUEST,’name’,$swMainName); $name = swSimpleSanitize($name); // XSS

The function swSimpleSanitize() only filters “<” and ">".

// /inc/utilities.php function swSimpleSanitize($s) { // filters out XSS input to be used on variables that should not habe html code or exec code $s = str_replace("<","",$s); $s = str_replace(">","",$s); return $s; }