Planet CDATA Filtering HTML Injection Vulnerability

Bugtraq ID:	36640
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 08 2009 12:00AM
Updated:	May 07 2015 05:06PM
Credit:	Steve Kemp in a Debian bug report.
Vulnerable:	Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

Planet CDATA Filtering HTML Injection Vulnerability

Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user.

Planet 2.0 is affected; other versions may also be vulnerable.

Planet CDATA Filtering HTML Injection Vulnerability

An attacker can exploit this issue through a browser.

Planet CDATA Filtering HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Planet CDATA Filtering HTML Injection Vulnerability

References:

• planet: Insufficient sanitization of 'description' part of an 'item', when it's (Jan Lieskovsky)
  
• CVE request for planet (Vincent Danent)
  
• Planet Homepage (Planet)
  
• planet: [CVE-2009-2937] - Insufficient escaping of input feeds (Steve Kemp )