PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability

Bugtraq ID:	13075
Class:	Input Validation Error
CVE:	CVE-2005-1049
Remote:	Yes
Local:	No
Published:	Apr 08 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	dcrab <[email protected]> is credited with the discovery of this issue.
Vulnerable:	PostNuke Development Team PostNuke Phoenix 0.760 RC3
Not Vulnerable:

PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability

A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability

The following proof of concept is available:

http://www.example.com/user.php?op="><script>alert(document.cookie)</script>&module=NS-NewUser&POSTNUKESID=355776cfb622466924a7096d4471a480

PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PostNuke Phoenix OP Parameter Remote Cross-Site Scripting Vulnerability

References:

• PostNuke Homepage (PostNuke Development Team)
  
• Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3 (dcrab )