diafan.CMS Cross Site Scripting Vulnerability
BID:45759
Info
diafan.CMS Cross Site Scripting Vulnerability
| Bugtraq ID: | 45759 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 28 2010 12:00AM |
| Updated: | Apr 27 2011 03:23PM |
| Credit: | High-Tech Bridge SA |
| Vulnerable: |
Diafan diafan.CMS 4.3 |
| Not Vulnerable: | |
Discussion
diafan.CMS Cross Site Scripting Vulnerability
diafan.CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
diafan.CMS 4.3 is vulnerable; other versions may also be affected.
NOTE (April 27, 2010): This BID was previously titled 'diafan.CMS Cross Site Scripting and HTML Injection Vulnerabilities'; the HTML-injection issue has been removed following further analysis.
diafan.CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
diafan.CMS 4.3 is vulnerable; other versions may also be affected.
NOTE (April 27, 2010): This BID was previously titled 'diafan.CMS Cross Site Scripting and HTML Injection Vulnerabilities'; the HTML-injection issue has been removed following further analysis.
Exploit / POC
diafan.CMS Cross Site Scripting Vulnerability
To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting user to follow a malicious URI.
The following examples are available:
To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting user to follow a malicious URI.
The following examples are available:
Solution / Fix
diafan.CMS Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
diafan.CMS Cross Site Scripting Vulnerability
References:
References:
- diafan.CMS Homepage (Diafan)
- Re: Stored XSS vulnerability in diafan.CMS (security curmudgeon
- Stored XSS vulnerability in diafan.CMS (advisory)
- XSS vulnerability in diafan.CMS (advisory)
- Stored XSS vulnerability in diafan.CMS (High-Tech Bridge SA)
- XSS vulnerability in diafan.CMS (High-Tech Bridge SA)