Xinha 'mode' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	41767
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 02 2011 12:00AM
Updated:	Feb 02 2011 05:00PM
Credit:	David Vieira-Kurz of MajorSecurity
Vulnerable:	Xinha Xinha 0.96.1 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 Xinha Xinha 0.96 beta2 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 Xinha Xinha 0.95 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 S9Y Serendipity 1.5.4 S9Y Serendipity 1.5.3 S9Y Serendipity 1.5.2
Not Vulnerable:	S9Y Serendipity 1.5.5

Xinha 'mode' Parameter Cross Site Scripting Vulnerability

Xinha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Xinha 0.96.1 is vulnerable; other versions may also be affected. In addition, versions prior to Serendipity 1.5.5 utilize vulnerable versions of Xinha and are therefore also vulnerable.

Xinha 'mode' Parameter Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Xinha 'mode' Parameter Cross Site Scripting Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Xinha 'mode' Parameter Cross Site Scripting Vulnerability

References:

• Xinha Homepage (Xinha)
  
• Important Security Update: Serendipity 1.5.5 released (Serendipity)
  
• XINHA Editor XSS - Cross Site Scripting Issue (Edgewall Software)