ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
BID:45541
Info
ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
| Bugtraq ID: | 45541 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2010 12:00AM |
| Updated: | Dec 27 2010 03:23PM |
| Credit: | High-Tech Bridge SA |
| Vulnerable: |
ImpressCMS ImpressCMS 1.2.3 RC2 ImpressCMS ImpressCMS 1.2.3 RC1 ImpressCMS ImpressCMS 1.2.3 RC1 ImpressCMS ImpressCMS 1.2.3 final ImpressCMS ImpressCMS 1.2.1 RC1 ImpressCMS ImpressCMS 1.2.1 final ImpressCMS ImpressCMS 1.2.1 ImpressCMS ImpressCMS 1.2.3 Beta ImpressCMS ImpressCMS 1.2.1 Beta ImpressCMS ImpressCMS 1.2 RC2 ImpressCMS ImpressCMS 1.2 RC1 ImpressCMS ImpressCMS 1.2 Final ImpressCMS ImpressCMS 1.2 Beta ImpressCMS ImpressCMS 1.2 Alpha2 ImpressCMS ImpressCMS 1.2 Alpha1 |
| Not Vulnerable: |
ImpressCMS ImpressCMS 1.2.4 |
Discussion
ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
ImpressCMS 1.2.3 Final is vulnerable; other versions may also be affected.
ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
ImpressCMS 1.2.3 Final is vulnerable; other versions may also be affected.
Exploit / POC
ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example input is available:
Attackers can use a browser to exploit this issue.
The following example input is available:
Solution / Fix
ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
ImpressCMS 'quicksearch_ContentContent' Parameter HTML Injection Vulnerability
References:
References:
- HTB22766 XSS vulnerability in ImpressCMS (High-Tech Bridge)
- ImpressCMS Homepage (ImpressCMS)
- Re: XSS vulnerability in ImpressCMS ([email protected])
- XSS vulnerability in ImpressCMS ([email protected])