3

I'd like to know if there is any danger of someone being able to access the database via XSS vulnerabilities on this page.

I have the following link. When you go to this link, the text I've enclosed as code displays on the site: www.site.com/languages.php

{"languages":"
\n
<\/a><\/div>\n
English<\/div>\n <\/div>
\n
<\/a><\/div>\n
French<\/div>\n <\/div>
\n
<\/a><\/div>\n
German<\/div>\n <\/div>
<\/div>\n ","Russian":{"html":"
\n<\/a><\/div>","list":["57"]}}

I change the link to this and the text changes accordingly: www.site.com/languages.php?list[]

{"languages":"
\n
<\/a><\/div>\n
English<\/div>\n <\/div>
\n
<\/a><\/div>\n
French<\/div>\n <\/div>
\n
<\/a><\/div>\n
German<\/div>\n <\/div>
<\/div>\n ","Russian":{"html":"
\n<\/a><\/div>","list":["","57"]}}

I again change the link and get this corresponding text: www.site.com/languages.php?list[]=whatever

{"languages":"
\n
<\/a><\/div>\n
English<\/div>\n <\/div>
\n
<\/a><\/div>\n
French<\/div>\n <\/div>
\n
<\/a><\/div>\n
German<\/div>\n <\/div>
<\/div>\n ","Russian":{"html":"
\n<\/a><\/div>","list":["whatever","57"]}}

Yet again, I make the following change in the link and get the following on screen (whatever onwards is displayed in a red color):

www.site.com/languages.php?list[]=<font color=red>whatever</font>

{"languages":"
\n
<\/a><\/div>\n
English<\/div>\n <\/div>
\n
<\/a><\/div>\n
French<\/div>\n <\/div>
\n
<\/a><\/div>\n
German<\/div>\n <\/div>
<\/div>\n ","Russian":{"html":"
\n<\/a><\/div>","list":["whatever<\/font>","57"]}}
  • The first sentience has nothing to do with the rest of the information you have posted. – rook Apr 4 '13 at 6:48
2

It is possible to access the database with XSS, if an attacker delivers an XSS payload to a browser that has database access. XSS allows an attacker to control a browser, if that browser is an authenticated user then an attacker can carry out actions as that authenticated user.

  • Is it possible for someone to access my database based on the bulk of what I posted in my question--i.e. by appending something to the url (and what would that be called--SQLi?)? – Pamela Apr 4 '13 at 6:52
  • @Pamela What on earth did you post? Is that supposed to be XSS? I don't see a script tag anywhere... Regardless, if it is XSS then my answer still stands. – rook Apr 4 '13 at 6:54
  • maybe it's not XSS, but something else. In that case, I should rephrase my question--is there any danger of someone being able to access my database via ANY vulnerabilities on this page? – Pamela Apr 4 '13 at 6:55
  • @Pamela I see a font tag, but that is totally worthless. Can you inject a script tag? Which would be Cross-site scripting. – rook Apr 4 '13 at 6:56
  • Yes, I can inject a script tag. – Pamela Apr 4 '13 at 6:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.