Gnuboard CMS - Cross-Site Scripting

What is the "Gnuboard CMS - Cross-Site Scripting" module?

The "Gnuboard CMS - Cross-Site Scripting" module is a test case designed to detect a cross-site scripting vulnerability in the Gnuboard CMS software. Gnuboard CMS is a content management system that allows users to create and manage websites. This module specifically targets the Gnuboard CMS software and checks for the presence of a cross-site scripting vulnerability.

The severity of this vulnerability is classified as medium, indicating that it has the potential to cause significant harm if exploited.

Impact

A cross-site scripting vulnerability allows remote attackers to inject arbitrary JavaScript code into web pages viewed by other users. This can lead to various malicious activities, such as stealing sensitive information, manipulating website content, or redirecting users to malicious websites.

How the module works?

The "Gnuboard CMS - Cross-Site Scripting" module works by sending a specific HTTP request to the target website and then analyzing the response to determine if the cross-site scripting vulnerability is present.

One example of an HTTP request sent by this module is:

GET /plugin/sms5/ajax.sms_emoticon.php?arr_ajax_msg=gnuboard<svg+onload=alert(document.domain)>

The module then applies several matching conditions to the response to confirm the presence of the vulnerability:

- The response body must contain the string "0nuboard<svg onload=alert(document.domain)>". - The response headers must include the string "text/html". - The HTTP status code must be 200.

If all of these conditions are met, the module reports the presence of the cross-site scripting vulnerability in the Gnuboard CMS software.