PostNuke Multiple Input Validation Vulnerabilities
BID:16752
Info
PostNuke Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16752 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 21 2006 12:00AM |
| Updated: | Feb 22 2006 11:22PM |
| Credit: | Maksymilian Arciemowicz is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
PostNuke Development Team PostNuke Phoenix 0.761 PostNuke Development Team PostNuke Phoenix 0.760 RC4 PostNuke Development Team PostNuke Phoenix 0.760 RC3 PostNuke Development Team PostNuke Phoenix 0.760 RC2 PostNuke Development Team PostNuke Phoenix 0.760 PostNuke Development Team PostNuke Phoenix 0.750 b PostNuke Development Team PostNuke Phoenix 0.750 PostNuke Development Team PostNuke Phoenix 0.726 PostNuke Development Team PostNuke Phoenix 0.723 PostNuke Development Team PostNuke Phoenix 0.722 PostNuke Development Team PostNuke Phoenix 0.721 PostNuke Development Team PostNuke 0.726 -3 PostNuke Development Team PostNuke 0.721 PostNuke Development Team PostNuke 0.703 PostNuke Development Team PostNuke 0.76 RC4b PostNuke Development Team PostNuke 0.76 RC4a PostNuke Development Team PostNuke 0.76 RC4 PostNuke Development Team PostNuke 0.75 -RC3 PostNuke Development Team PostNuke 0.75 PostNuke Development Team PostNuke 0.74 PostNuke Development Team PostNuke 0.73 PostNuke Development Team PostNuke 0.72 PostNuke Development Team PostNuke 0.71 PostNuke Development Team PostNuke 0.70 PostNuke Development Team PostNuke 0.64 PostNuke Development Team PostNuke 0.63 PostNuke Development Team PostNuke 0.62 PostNuke Development Team PostNuke 0.7 Cisco Aironet 340 BR340 Firmware 0.761 a Cisco Aironet 340 BR340 Firmware 0.761 |
| Not Vulnerable: |
PostNuke Development Team PostNuke 0.762 |
Discussion
PostNuke Multiple Input Validation Vulnerabilities
PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, exploit vulnerabilities in the underlying database implementation, or control how the site is rendered to the user. Other attacks are also possible.
PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, exploit vulnerabilities in the underlying database implementation, or control how the site is rendered to the user. Other attacks are also possible.
Exploit / POC
PostNuke Multiple Input Validation Vulnerabilities
An exploit is not required.
The following proof of concept example are available:
Cross-site scripting examples:
http://www.example.com/user.php?op=edituser&htmltext=[code]
http://www.example.com/admin.php?module=NS-Languages&op=missing&language=">[code]
http://www.example.com/admin.php?module=NS-Languages&op=translation&language=[code]
SQL injection example:
http://www.example.com/admin.php?module=NS-Languages&op=missing&language=[sql]
An exploit is not required.
The following proof of concept example are available:
Cross-site scripting examples:
http://www.example.com/user.php?op=edituser&htmltext=[code]
http://www.example.com/admin.php?module=NS-Languages&op=missing&language=">[code]
http://www.example.com/admin.php?module=NS-Languages&op=translation&language=[code]
SQL injection example:
http://www.example.com/admin.php?module=NS-Languages&op=missing&language=[sql]
Solution / Fix
PostNuke Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
PostNuke Development Team PostNuke 0.62
PostNuke Development Team PostNuke 0.63
PostNuke Development Team PostNuke 0.64
PostNuke Development Team PostNuke 0.7
PostNuke Development Team PostNuke 0.70
PostNuke Development Team PostNuke 0.703
PostNuke Development Team PostNuke 0.71
PostNuke Development Team PostNuke 0.72
PostNuke Development Team PostNuke 0.721
PostNuke Development Team PostNuke 0.726 -3
PostNuke Development Team PostNuke 0.73
PostNuke Development Team PostNuke 0.74
PostNuke Development Team PostNuke 0.75
PostNuke Development Team PostNuke 0.75 -RC3
PostNuke Development Team PostNuke 0.76 RC4
PostNuke Development Team PostNuke 0.76 RC4b
PostNuke Development Team PostNuke 0.76 RC4a
Cisco Aironet 340 BR340 Firmware 0.761 a
Cisco Aironet 340 BR340 Firmware 0.761
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
PostNuke Development Team PostNuke 0.62
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.63
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.64
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.7
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.70
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.703
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.71
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.72
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.721
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.726 -3
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.73
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.74
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.75
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.75 -RC3
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.76 RC4
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.76 RC4b
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
PostNuke Development Team PostNuke 0.76 RC4a
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
Cisco Aironet 340 BR340 Firmware 0.761 a
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
Cisco Aironet 340 BR340 Firmware 0.761
-
PostNuke Development Team PostNuke 0.762.tar.gz
http://news.postnuke.com/Downloads-req-getit-lid-517.html
References
PostNuke Multiple Input Validation Vulnerabilities
References:
References:
- Multiple vulnerabilities in PostNuke <= 0.761 (SecurityReason)
- PostNuke Homepage (PostNuke Development Team)
- Security: Announcements: PostNuke .762 Released (PostNuke)