cm3 Acora CMS 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	62008
Class:	Input Validation Error
CVE:	CVE-2013-4722
Remote:	Yes
Local:	No
Published:	Aug 26 2013 12:00AM
Updated:	Aug 26 2013 12:00AM
Credit:	Pedro Andujar
Vulnerable:	DDSN Interactive cm3 Acora CMS 6.0.6/1a DDSN Interactive cm3 Acora CMS 6.0.2/1a DDSN Interactive cm3 Acora CMS 5.5.7/12b DDSN Interactive cm3 Acora CMS 5.5.0/1b-p1
Not Vulnerable:

cm3 Acora CMS 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

cm3 Acora CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

cm3 Acora CMS 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting to victim to follow a malicious URI.

The following example URIs are available:

https://www.example.com/AcoraCMS/Admin/login/default.asp?username="</div><script>alert(document.cookie)</script>

https://www.example.com/AcoraCMS/Admin/login/default.asp?url="</form><META HTTP-EQUIV=Refresh CONTENT="0; URL=http://www.google.es">