ConPresso CMS Multiple Input Validation Vulnerabilities

Bugtraq ID:	20273
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 29 2006 12:00AM
Updated:	Sep 29 2006 10:50PM
Credit:	David Vieira-Kurz is credited with the discovery of these vulnerabilities.
Vulnerable:	ConPresso ConPresso CMS 4.0.4a
Not Vulnerable:	ConPresso ConPresso CMS 4.0.5a

ConPresso CMS Multiple Input Validation Vulnerabilities

ConPresso CMS is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

ConPresso CMS Multiple Input Validation Vulnerabilities

Attackers can exploit these issues via a web client.

ConPresso CMS Multiple Input Validation Vulnerabilities

Solution:
The vendor has released version 4.0.5a to address these issues; please see the references for details.


ConPresso ConPresso CMS 4.0.4a

• ConPresso conpresso-4.0.5a.zip
  http://download.conpresso.de/conpresso-4.0.5a.zip

ConPresso CMS Multiple Input Validation Vulnerabilities

References:

• [MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQ (David Vieira-Kurz)
  
• ConPresso CMS Homepage (Bartels Schone)
  
• [MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQ ([email protected])