Habari Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	45530
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 21 2010 12:00AM
Updated:	Dec 21 2010 12:00AM
Credit:	High-Tech Bridge SA
Vulnerable:	Habari Habari 0.6.5
Not Vulnerable:	Habari Habari 0.6.6

Habari Multiple Cross-Site Scripting Vulnerabilities

Habari is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Habari 0.6.5 is affected; other versions may be vulnerable as well.

Habari Multiple Cross-Site Scripting Vulnerabilities

To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.

The following example URIs are available:

http://www.example.com/system/admin/dash_status.php?status_data[1]=<script>alert('XSS');</script>
http://www.example.com/system/admin/dash_additem.php?additem_form=<script>alert('XSS');</script>

Habari Multiple Cross-Site Scripting Vulnerabilities

Solution:
A vendor update is available. Please see the references for more information.

Habari Multiple Cross-Site Scripting Vulnerabilities

References:

• Habari Homepage (Habari)
  
• Release 0.6.6 (Habari)
  
• XSS vulnerability in Habari (High-Tech Bridge SA)
  
• XSS vulnerability in Habari (High-Tech Bridge SA)