CVE-2011-4572

CF Image Hosting Script 1.3.82, 1.4.1 - Cross-Site Scripting via q Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-4572. PoCs published by bd0rk.

AI-analyzed exploit summary This exploit targets a file disclosure vulnerability in CF Image Hosting Script 1.3.82 by manipulating the 'q' parameter in 'tesmodrewrite.php' to disclose arbitrary files. It uses LWP::UserAgent to send a crafted HTTP request and retrieve the file content.

Description

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure vulnerability, but this is likely inaccurate.

Exploits (1)

exploitdb WORKING POC

by bd0rk · pythonwebappsphp

https://www.exploit-db.com/exploits/17927

View Code ZIP pw:eip

This exploit targets a file disclosure vulnerability in CF Image Hosting Script 1.3.82 by manipulating the 'q' parameter in 'tesmodrewrite.php' to disclose arbitrary files. It uses LWP::UserAgent to send a crafted HTTP request and retrieve the file content.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: CF Image Hosting Script 1.3.82

No auth needed

Prerequisites: Target must be running CF Image Hosting Script 1.3.82 · The vulnerable endpoint '/inc/tesmodrewrite.php' must be accessible

MITRE ATT&CK