DotNetNuke Editor HTML Injection Vulnerability

Bugtraq ID:	50515
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 03 2011 12:00AM
Updated:	Nov 03 2011 12:00AM
Credit:	Richard Lundeen of Microsoft and Microsoft Vulnerability Research (MSVR)
Vulnerable:	DotNetNuke DotNetNuke 6.0.1 DotNetNuke DotNetNuke 5.6 DotNetNuke DotNetNuke 5.5.1 DotNetNuke DotNetNuke 5.5 DotNetNuke DotNetNuke 5.4.3 DotNetNuke DotNetNuke 5.4.2 DotNetNuke DotNetNuke 5.4.1 DotNetNuke DotNetNuke 5.4 DotNetNuke DotNetNuke 5.3.1 DotNetNuke DotNetNuke 5.3 DotNetNuke DotNetNuke 5.2.3 DotNetNuke DotNetNuke 5.2 DotNetNuke DotNetNuke 5.1.4 DotNetNuke DotNetNuke 5.1.3 DotNetNuke DotNetNuke 5.1.2 DotNetNuke DotNetNuke 5.1.1 DotNetNuke DotNetNuke 5.1 DotNetNuke DotNetNuke 5.0.1 DotNetNuke DotNetNuke 6.0 DotNetNuke DotNetNuke 5.6.3 DotNetNuke DotNetNuke 5.6.1 DotNetNuke DotNetNuke 5.0
Not Vulnerable:	DotNetNuke DotNetNuke 6.1.0 DotNetNuke DotNetNuke 5.6.4

DotNetNuke Editor HTML Injection Vulnerability

DotNetNuke is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user.

DotNetNuke versions prior to 5.6.4 and prior to 6.1.0 are vulnerable.

DotNetNuke Editor HTML Injection Vulnerability

An attacker can exploit this issue through a browser.

DotNetNuke Editor HTML Injection Vulnerability

Solution:
Updates are available; please see the references for more information.

DotNetNuke Editor HTML Injection Vulnerability

References:

• disable autoremember during registration (DotNetNuke)
  
• DotNetNuke Homepage (DotNetNuke)
  
• failure to sanitize certain xss strings (DotNetNuke)