TikiWiki 'tiki-special_chars.php' Cross-Site Scripting Vulnerability

Bugtraq ID:	27004
Class:	Input Validation Error
CVE:	CVE-2007-6526
Remote:	Yes
Local:	No
Published:	Dec 24 2007 12:00AM
Updated:	Jan 24 2008 04:38PM
Credit:	Mesut Timur is credited with the discovery of this vulnerability.
Vulnerable:	TikiWiki Project TikiWiki 1.9.8.3 Gentoo Linux
Not Vulnerable:	TikiWiki Project TikiWiki 1.9.9

TikiWiki 'tiki-special_chars.php' Cross-Site Scripting Vulnerability

TikiWiki is prone a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

TikiWiki 1.9.8.3 is vulnerable; prior versions may also be affected.

TikiWiki 'tiki-special_chars.php' Cross-Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.

TikiWiki 'tiki-special_chars.php' Cross-Site Scripting Vulnerability

Solution:
The vendor released TikiWiki 1.9.9 to address this issue. Please see the references for more information.


TikiWiki Project TikiWiki 1.9.8.3

• TikiWiki Project tikiwiki-1.9.9.tar.gz
  http://downloads.sourceforge.net/tikiwiki/tikiwiki-1.9.9.tar.gz?modtim e=1198314005&big_mirror=1

TikiWiki 'tiki-special_chars.php' Cross-Site Scripting Vulnerability

References:

• TikiWiki Homepage (TikiWiki Project)
  
• TikiWiki Release Notes 1.9.9 (TikiWiki Project)
  
• Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability (Mesut Timur )
  
• Release Process 1.9.9 (TikiWiki Project)