LimeSurvey Survey Text Field HTML Injection Vulnerability

Bugtraq ID:	50696
Class:	Input Validation Error
CVE:	CVE-2011-5256
Remote:	Yes
Local:	No
Published:	Nov 16 2011 12:00AM
Updated:	Feb 14 2013 12:21PM
Credit:	Joshua Tiago, Cirosec via Secunia.
Vulnerable:	LimeSurvey LimeSurvey 1.91+ Build 11343-20 LimeSurvey LimeSurvey 1.91+
Not Vulnerable:	LimeSurvey LimeSurvey 1.91+ Build 11379-20

LimeSurvey Survey Text Field HTML Injection Vulnerability

LimeSurvey is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

LimeSurvey 1.91+ Build 11343-20111108 is vulnerable; prior versions may also be affected.

LimeSurvey Survey Text Field HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

LimeSurvey Survey Text Field HTML Injection Vulnerability

Solution:
Updates are available. Please see the references for more details.

LimeSurvey Survey Text Field HTML Injection Vulnerability

References:

• LimeSurvey Homepage (LimeSurvey)
  
• limesurvey191plus-build11379-20111116.7z (19.0 MB) (sourceforge)