Xinha Multiple Remote Arbitrary File Upload Vulnerabilities

Bugtraq ID:	46109
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 02 2011 12:00AM
Updated:	Feb 02 2011 12:00AM
Credit:	David Vieira-Kurz, MajorSecurity, Russ McRee ,Wenz
Vulnerable:	Xinha Xinha 0.96.1 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 Xinha Xinha 0.96 beta2 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 Xinha Xinha 0.95 + S9Y Serendipity 1.5.3 + S9Y Serendipity 1.5.2 + S9Y Serendipity 1.4 S9Y Serendipity 1.5.4 S9Y Serendipity 1.5.3 S9Y Serendipity 1.5.2
Not Vulnerable:	S9Y Serendipity 1.5.5

Xinha Multiple Remote Arbitrary File Upload Vulnerabilities

Xinha is prone to multiple remote arbitrary-file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issue to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

Xinha 0.96.1 is vulnerable; other versions may also be affected. In addition, versions prior to Serendipity 1.5.5 utilize vulnerable versions of Xinha and are therefore also vulnerable.

Xinha Multiple Remote Arbitrary File Upload Vulnerabilities

Attackers can use a browser to exploit these issue.

Xinha Multiple Remote Arbitrary File Upload Vulnerabilities

Solution:
Vendor updates are available. Please contact the vendor for more information.

Xinha Multiple Remote Arbitrary File Upload Vulnerabilities

References:

• Xinha Homepage (Xinha)
  
• Important Security Update: Serendipity 1.5.5 released (Serendipity)
  
• XINHA Editor XSS - Cross Site Scripting Issue (Edgewall Software)