Serendipity Administration Page Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	20627
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 19 2006 12:00AM
Updated:	Oct 20 2006 10:33PM
Credit:	Stefan Esser is credited with the discovery of these vulnerabilities.
Vulnerable:	Serendipity Serendipity 1.0.1 Serendipity Serendipity 1.0
Not Vulnerable:	Serendipity Serendipity 1.0.2

Serendipity Administration Page Multiple Cross-Site Scripting Vulnerabilities

Serendipity is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to 1.0.2 are vulnerable to these issues.

Serendipity Administration Page Multiple Cross-Site Scripting Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.

Serendipity Administration Page Multiple Cross-Site Scripting Vulnerabilities

Solution:
The vendor has released version 1.0.2 to address this issue. Please see the references for more information.

Serendipity Administration Page Multiple Cross-Site Scripting Vulnerabilities

References:

• Vendor Home Page (Serendipity)
  
• Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities (Stefan Esser )