{"action":"created","issue":{"url":"https://api.github.com/repos/q2a/question2answer/issues/435","repository_url":"https://api.github.com/repos/q2a/question2answer","labels_url":"https://api.github.com/repos/q2a/question2answer/issues/435/labels{/name}","comments_url":"https://api.github.com/repos/q2a/question2answer/issues/435/comments","events_url":"https://api.github.com/repos/q2a/question2answer/issues/435/events","html_url":"https://github.com/q2a/question2answer/issues/435","id":167215552,"number":435,"title":"Question2Answer 1.7 - Stored XSS Vulnerability","user":{"login":"q2apro","id":6764548,"avatar_url":"https://avatars.githubusercontent.com/u/6764548?v=3","gravatar_id":"","url":"https://api.github.com/users/q2apro","html_url":"https://github.com/q2apro","followers_url":"https://api.github.com/users/q2apro/followers","following_url":"https://api.github.com/users/q2apro/following{/other_user}","gists_url":"https://api.github.com/users/q2apro/gists{/gist_id}","starred_url":"https://api.github.com/users/q2apro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/q2apro/subscriptions","organizations_url":"https://api.github.com/users/q2apro/orgs","repos_url":"https://api.github.com/users/q2apro/repos","events_url":"https://api.github.com/users/q2apro/events{/privacy}","received_events_url":"https://api.github.com/users/q2apro/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2016-07-24T03:52:28Z","updated_at":"2016-07-27T17:00:26Z","closed_at":"2016-07-25T20:13:33Z","body":"Just bringing this into attention from http://www.question2answer.org/qa/52743/security-wise-how-secure-is-q%26a resp. http://iedb.ir/exploits-2900.html\r\n\r\n\t###########################\r\n\r\n\t# Question2Answer 1.7 - Stored XSS Vulnerability\r\n\r\n\t###########################\r\n\r\n\t######################################################################\r\n\t[+] Title: Script Question2Answer 1.7 - Stored XSS Vulnerability\r\n\t[+] Author: s0w\r\n\t[+] Tested On Windows & Linux\r\n\t[+] Date: 21/03/2015\r\n\t[+] Type: Web Application\r\n\t[+] Script Download: https://github.com/q2a/question2answer\r\n\t[+] Vendor Homepage: http://www.question2answer.org\r\n\t[+] Vulnerability in:\\qa-include\\pages\\question.php\r\n\t[+] Google Dork : intext:\"Powered by Question2Answer\"\r\n\t#######################################################################\r\n\r\n\t[+] As shown in the code, the value of 'title' and 'textbody' not filtered\r\n\tby 'htmlspecialcharts'\r\n\twhich cause stored xss and same in data-store in webserver SQL commands\r\n\t.\r\n\r\n\t[+] Exploit :\r\n\t1. Browse application in browser ..\r\n\t2. Add new question with xss code like alert method ;)\r\n\t3. submit the new question to viewers ..\r\n\t4. complete next steps as xss in tag,body,title,.. etc ..\r\n\t5. Finally submit your Qes ..\r\n\t6. Test your target in main page ./index.php ..\r\n\t7. Use this in Cookies,alerts, Or TrafficBots :D Have Fun !!\r\n\r\n\t[+] XSS Pattern can be used: '\"<script>alert(/s0w/)</script>\r\n\t[+] Demo Video : http://youtu.be/6qy9DXifNiw\r\n\t[+] Demo Target :\r\n\thttp://soualwjoab.com/\r\n\r\n\t# Discovered By: s0w\r\n\t# Contact: fb.me/s0w.egy\r\n\t# Mail: s0wxp0c@gmail.com\r\n\r\n\tTo Egyptian Shell team | Sec4ever\r\n\r\n\t###########################\r\n\r\n\t# Iranian Exploit DataBase = http://IeDb.Ir [2015-03-25]\r\n\r\n\t###########################\r\n\r\nHas this been fixed? "},"comment":{"url":"https://api.github.com/repos/q2a/question2answer/issues/comments/235650692","html_url":"https://github.com/q2a/question2answer/issues/435#issuecomment-235650692","issue_url":"https://api.github.com/repos/q2a/question2answer/issues/435","id":235650692,"user":{"login":"Coderx7","id":5382892,"avatar_url":"https://avatars.githubusercontent.com/u/5382892?v=3","gravatar_id":"","url":"https://api.github.com/users/Coderx7","html_url":"https://github.com/Coderx7","followers_url":"https://api.github.com/users/Coderx7/followers","following_url":"https://api.github.com/users/Coderx7/following{/other_user}","gists_url":"https://api.github.com/users/Coderx7/gists{/gist_id}","starred_url":"https://api.github.com/users/Coderx7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Coderx7/subscriptions","organizations_url":"https://api.github.com/users/Coderx7/orgs","repos_url":"https://api.github.com/users/Coderx7/repos","events_url":"https://api.github.com/users/Coderx7/events{/privacy}","received_events_url":"https://api.github.com/users/Coderx7/received_events","type":"User","site_admin":false},"created_at":"2016-07-27T17:00:26Z","updated_at":"2016-07-27T17:00:26Z","body":"@svivian : Thanks alot , silly me I missed that .\r\nGood job by the way ;)"}}
{"actor":{"display_login":"Coderx7"}}