Drake CMS UI.DTA.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	23216
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 30 2007 12:00AM
Updated:	Apr 03 2007 03:12AM
Credit:	HACKERS PAL is credited with the discovery of this vulnerability.
Vulnerable:	Drake CMS Drake CMS 0.3.7 Beta Drake CMS Drake CMS 0.3.7
Not Vulnerable:	Drake CMS Drake CMS 0.3.8 Beta

Drake CMS UI.DTA.PHP Cross-Site Scripting Vulnerability

Drake CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 0.3.7 Beta is vulnerable; other versions may also be affected.

Drake CMS UI.DTA.PHP Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/23216.html

Drake CMS UI.DTA.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor reports that this issue will be addressed in the upcoming 0.3.8 beta release. Contact the vendor for details on obtaining the appropriate updates.

Drake CMS UI.DTA.PHP Cross-Site Scripting Vulnerability

References:

• Drake CMS Homepage (Drake CMS)
  
• DrakeCMS multiple vulerabilities (HACKERS PAL)