PT-2019-13548 · Xavier · Xavier Php Management Panel

Published 2019-07-26 · Updated 2020-08-24 · CVE-2019-14228

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 3.0

Description The issue concerns a Reflected POST-based XSS that occurs via the username parameter when registering a new user at the "admin/includes/adminprocess.php" endpoint. If an error occurs during user registration, the unsanitized username will be reflected back via the error page. Additionally, the lack of CSRF protection on this endpoint allows an attacker to chain the XSS with CSRF, enabling remote exploitation.

Recommendations For Xavier PHP Management Panel version 3.0, consider implementing proper input sanitization for the username parameter and adding CSRF protection to the "admin/includes/adminprocess.php" endpoint to prevent exploitation. As a temporary workaround, restrict access to the admin/includes/adminprocess.php endpoint to minimize the risk of exploitation.

Exploit

Fix

CSRF

XSS

Weakness Enumeration

CWE-352

CWE-79

Related Identifiers

CVE-2019-14228

Affected Products

Xavier Php Management Panel

References · 4

• 🔥 https://m-q-t.github.io/notes/xavier-csrf-to-xss-takeover · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-14228 · Security Note
• https://osv.dev/vulnerability/CVE-2019-14228 · Vendor Advisory
• https://codecanyon.net/item/xavier-php-login-script-user-management/9146226 · Note