Zend Framework Multiple Input Validation Vulnerabilities and Security Bypass Weakness

Bugtraq ID:	37809
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 14 2010 12:00AM
Updated:	May 07 2015 05:14PM
Credit:	Pádraic Brady, Peter Petrison, and Mark Corti
Vulnerable:	Zend Zend Framework 1.9.6 Zend Zend Framework 1.9.5 Zend Zend Framework 1.9.4 Zend Zend Framework 1.9.3 Zend Zend Framework 1.9.2 Zend Zend Framework 1.9.1 Zend Zend Framework 1.9 Zend Zend Framework 1.8.3 Zend Zend Framework 1.8.2 Zend Zend Framework 1.8.1 Zend Zend Framework 1.8 Zend Zend Framework 1.7.8 Zend Zend Framework 1.7.7 Zend Zend Framework 1.7.6 Zend Zend Framework 1.7.5 Zend Zend Framework 1.7.4 Zend Zend Framework 1.7.3 Zend Zend Framework 1.7.2 Zend Zend Framework 1.7.1 Zend Zend Framework 1.7
Not Vulnerable:	Zend Zend Framework 1.9.7 Zend Zend Framework 1.8.5 Zend Zend Framework 1.7.9

Zend Framework Multiple Input Validation Vulnerabilities and Security Bypass Weakness

Zend Framework is prone to multiple input-validation vulnerabilities and a weakness:

- Multiple cross-site scripting issues
- An HTML-injection issue
- A security-bypass weakness

An attacker may leverage the cross-site scripting issues and HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The attacker can exploit the security-bypass weakness in conjunction with other latent vulnerabilities to bypass certain security restrictions.

Versions prior to Zend Framework 1.7.9, 1.8.5, and 1.9.7 are vulnerable.

Zend Framework Multiple Input Validation Vulnerabilities and Security Bypass Weakness

To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.

The following example URI is available:

http://www.example.com/index.php?lang=english&skin=&debut=0&seeAdd=1&seeNotes=&seeMess=[XSS-Vuln]

Zend Framework Multiple Input Validation Vulnerabilities and Security Bypass Weakness

Solution:
Updates are available. Please see the references for more information.

Zend Framework Multiple Input Validation Vulnerabilities and Security Bypass Weakness

References:

• Zend Framework 1.9.7, 1.8.5, and 1.7.9 Released (Zend)
  
• Zend Framework Homepage (Zend)
  
• ZF2010-01: Potential XSS vectors due to inconsistent encodings (Zend)
  
• ZF2010-02: Potential XSS vector in Zend_Dojo_View_Helper_Editor (Zend)
  
• ZF2010-03: Potential XSS vector in Zend_Filter_StripTags when comments allowed (Zend)
  
• ZF2010-04: Potential MIME-type Injection in Zend_File_Transfer (Zend)
  
• ZF2010-05: Potential XSS vector in Zend_Service_ReCaptcha_MailHide (Zend)
  
• ZF2010-06: Potential XSS or HTML Injection vector in Zend_Json (Zend)