MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
BID:33184
Info
MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 33184 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-5942 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2009 12:00AM |
| Updated: | Jan 30 2009 09:59PM |
| Credit: | Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. |
| Vulnerable: |
MODx MODx 0.9.6 .2 MODx MODx 0.9.6 .1p1 MODx MODx 0.9.6 .1 MODx MODx 0.9.6 |
| Not Vulnerable: |
MODx MODx 0.9.6 .3 |
Discussion
MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
MODx is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.
Versions prior to MODx 0.9.6.3 are vulnerable.
MODx is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.
Versions prior to MODx 0.9.6.3 are vulnerable.
Exploit / POC
MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
Solution:
The vendor has released MODx 0.9.6.3 to address these issues. Please see the references for more information.
MODx MODx 0.9.6
MODx MODx 0.9.6 .1
MODx MODx 0.9.6 .2
MODx MODx 0.9.6 .1p1
Solution:
The vendor has released MODx 0.9.6.3 to address these issues. Please see the references for more information.
MODx MODx 0.9.6
-
MODx modx-0.9.6.3.tar.gz
http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVp bGRz&fileName=modx-0.9.6.3.tar.gz&utm_source=0961p2&utm_medium=web&utm _campaign=download
MODx MODx 0.9.6 .1
-
MODx modx-0.9.6.3.tar.gz
http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVp bGRz&fileName=modx-0.9.6.3.tar.gz&utm_source=0961p2&utm_medium=web&utm _campaign=download
MODx MODx 0.9.6 .2
-
MODx modx-0.9.6.3.tar.gz
http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVp bGRz&fileName=modx-0.9.6.3.tar.gz&utm_source=0961p2&utm_medium=web&utm _campaign=download
MODx MODx 0.9.6 .1p1
References
MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
References:
References: