moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
BID:31493
Info
moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
| Bugtraq ID: | 31493 |
| Class: | Unknown |
| CVE: |
CVE-2008-6131 CVE-2008-6129 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 30 2008 12:00AM |
| Updated: | Jul 05 2016 10:01PM |
| Credit: | David Vieira-Kurz |
| Vulnerable: |
mozilo moziloWiki 1.0.1 |
| Not Vulnerable: |
mozilo moziloWiki 1.0.2 |
Discussion
moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
moziloWiki is prone to multiple vulnerabilities, including a directory-traversal issue, a session-fixation issue, and multiple cross-site scripting issues.
An attacker may leverage these issues to view arbitrary local files within the context of the webserver, to execute arbitrary script code in the browser of an unsuspecting user, or to hijack a valid user's session.
Versions prior to moziloWiki 1.0.2 are vulnerable.
moziloWiki is prone to multiple vulnerabilities, including a directory-traversal issue, a session-fixation issue, and multiple cross-site scripting issues.
An attacker may leverage these issues to view arbitrary local files within the context of the webserver, to execute arbitrary script code in the browser of an unsuspecting user, or to hijack a valid user's session.
Versions prior to moziloWiki 1.0.2 are vulnerable.
Exploit / POC
moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
Attackers can exploit the information-disclosure issue through a browser. To exploit the cross-site scripting and session-fixation issues, the attacker must entice unsuspecting users to follow a malicious URI.
Attackers can exploit the information-disclosure issue through a browser. To exploit the cross-site scripting and session-fixation issues, the attacker must entice unsuspecting users to follow a malicious URI.
Solution / Fix
moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
moziloWiki Prior to 1.0.2 Multiple Vulnerabilities
References:
References: