ImpressCMS 'rank_title' Parameter HTML Injection Vulnerability

Bugtraq ID:	32640
Class:	Input Validation Error
CVE:	CVE-2008-6360
Remote:	Yes
Local:	No
Published:	Oct 21 2008 12:00AM
Updated:	Mar 19 2015 09:09AM
Credit:	Muhaimin Dzulfakar
Vulnerable:	ImpressCMS ImpressCMS 1.0.2 "Janus" Final
Not Vulnerable:	ImpressCMS ImpressCMS 1.0.3 "Janus" RC 1

ImpressCMS 'rank_title' Parameter HTML Injection Vulnerability

ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to ImpressCMS 1.0.3 "Janus" RC 1 are affected. Other versions may also be vulnerable.

ImpressCMS 'rank_title' Parameter HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

ImpressCMS 'rank_title' Parameter HTML Injection Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

ImpressCMS 'rank_title' Parameter HTML Injection Vulnerability

References:

• ImpressCMS 1.0.3 "Janus" Final release notes (ImpressCMS)
  
• ImpressCMS Homepage (ImpressCMS)