Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
BID:53048
Info
Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
| Bugtraq ID: | 53048 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-4745 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2012 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | Aung Khant |
| Vulnerable: |
The Collective Acuity CMS 2.6.2 |
| Not Vulnerable: | |
Discussion
Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
Acuity CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Acuity CMS 2.6.2 is vulnerable; other versions may also be affected.
Acuity CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Acuity CMS 2.6.2 is vulnerable; other versions may also be affected.
Exploit / POC
Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
The following example URI is available:
http://www.example.com/admin/login.asp?UserName=";><script>prompt(/xss/)</script>
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
The following example URI is available:
http://www.example.com/admin/login.asp?UserName=";><script>prompt(/xss/)</script>
Solution / Fix
Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Acuity CMS 'UserName' Parameter Cross Site Scripting Vulnerability
References:
References:
- Acuity CMS Homepage (The Collective)
- Acuity CMS 2.6.x <= Cross Site Scripting (Aung Khant)