BID:15539

PmWiki Search Cross-Site Scripting Vulnerability

Info

PmWiki Search Cross-Site Scripting Vulnerability

Bugtraq ID:	15539
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 22 2005 12:00AM
Updated:	Dec 20 2006 10:37PM
Credit:	Moritz Naumann IT Consulting & Services is credited with the discovery of this vulnerability.
Vulnerable:	PmWiki PmWiki 2.0.12 PmWiki PmWiki 2.0.11 PmWiki PmWiki 2.0.10 PmWiki PmWiki 2.0.9 PmWiki PmWiki 2.0.8 PmWiki PmWiki 2.0.7 PmWiki PmWiki 2.0.6 PmWiki PmWiki 2.0.5 PmWiki PmWiki 2.0.4 PmWiki PmWiki 2.0.3 PmWiki PmWiki 2.0.2 PmWiki PmWiki 2.0.1 PmWiki PmWiki 2.0 .0

Not Vulnerable:	PmWiki PmWiki 2.0.13

Discussion

PmWiki Search Cross-Site Scripting Vulnerability

PmWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PmWiki 2.0 up to and including 2.0.12 are vulnerable; other versions may also be affected.

Exploit / POC

PmWiki Search Cross-Site Scripting Vulnerability

No exploit is required.

An example URI has been provided:

http://www.example.com/Site/Search?action=search&q=TRY%20ANOTHER%20SEARCH%20NOW!%20YES,%20YOU!'%20onMouseOver='alert(document.title);'%20

Solution / Fix

PmWiki Search Cross-Site Scripting Vulnerability

Solution:
Versions after 2.0.12 are reported to contain a fix for this vulnerability; please see the referenced website for details and upgrades.

PmWiki PmWiki 2.0 .0