PostNuke Modules.PHP Cross Site Scripting Vulnerability

Bugtraq ID:	5809
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 26 2002 12:00AM
Updated:	Sep 26 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Mark Grimes <[email protected]>.
Vulnerable:	PostNuke Development Team PostNuke 0.721 PostNuke Development Team PostNuke 0.72
Not Vulnerable:

PostNuke Modules.PHP Cross Site Scripting Vulnerability

A cross site scripting vulnerability has been reported for PostNuke.

An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link. Attacker-supplied HTML and script code may be executed on a web client in the context of the site hosting the web-based forum.

PostNuke Modules.PHP Cross Site Scripting Vulnerability

The following proof of concepts were submitted:

http://news.postnuke.com/modules.php?op=modload&name=News&file=index&catid=&topic=>
<script>alert(document.cookie);</script>

http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=
<script>alert(document.cookie);</script+>

PostNuke Modules.PHP Cross Site Scripting Vulnerability

Solution:
The PostNuke Development Team has a patch for this issue. Users of PostNuke 0.7.2.1 are advised to download and install this patch.


PostNuke Development Team PostNuke 0.721

• PostNuke pnAPI.php
  http://developers.postnuke.com/cgi-bin/viewcvs.cgi/*checkout*/postnuke -devel/html/includes/pnAPI.php?rev=HEAD&content-type=text

PostNuke Modules.PHP Cross Site Scripting Vulnerability

References:

• PostNuke Homepage (PostNuke Development Team)
  
• XSS in Postnuke Rogue release (0.72) (Muhammad Faisal Rauf Danka )