Drake CMS 'index.php' Cross-Site Scripting Vulnerability

Bugtraq ID:	27459
Class:	Input Validation Error
CVE:	CVE-2007-6695
Remote:	Yes
Local:	No
Published:	Jan 25 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Omer Singer is credited with the discovery of this vulnerability.
Vulnerable:	Drake CMS Drake CMS 0.4.9
Not Vulnerable:	Drake CMS Drake CMS 0.4.10 RC6

Drake CMS 'index.php' Cross-Site Scripting Vulnerability

Drake CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Drake CMS 0.4.9 is vulnerable; other versions may also be affected.

Drake CMS 'index.php' Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/27459.html

Drake CMS 'index.php' Cross-Site Scripting Vulnerability

Solution:
The vendor has released an update to address this issue. Please see the references for more information.

Drake CMS 'index.php' Cross-Site Scripting Vulnerability

References:

• Advisory #071214c - Drake CMS Cross-Site Scripting Vulnerability (The Digitrust Group)
  
• Drake CMS Homepage (Drake CMS)