KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability
# Published : 2010-08-11
# Author : fdisk
# Previous Title : PHP-Nuke-8.1-seo-Arabic Remote File Include
# Next Title : SaurusCMS v4.7.0 Remote File Inclusion Vulnerability

# Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability 
# Date: 2010-08-11
# Author: fdisk
# Software Link: http://www.knowledgetree.com/products/community/download
# Version: 3.5.2 
# Notes: Fixed in the last version. 


Go to search box or search criteria, enter your javascript code and save your search. 
These searches can be shared with all the users enabling us to insert malicious javascript code.

POC:
Load http://localhost/dashboard.php or http://localhost/search2.php?action=searchResults in the textbox enter <script>alert('moo')</script> and save your search. 
Load saved searches to view result.