Tiki Wiki CMS Groupware 'id' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	63463
Class:	Input Validation Error
CVE:	CVE-2013-6022
Remote:	Yes
Local:	No
Published:	Oct 31 2013 12:00AM
Updated:	Oct 31 2013 12:00AM
Credit:	Nikhil Kumar Srivastava from Techdefence Labs and Jinen Patel
Vulnerable:
Not Vulnerable:

Tiki Wiki CMS Groupware 'id' Parameter Cross Site Scripting Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Tiki Wiki CMS Groupware 11.0 is vulnerable; other versions may also be affected.

Tiki Wiki CMS Groupware 'id' Parameter Cross Site Scripting Vulnerability

An attacker must trick an unsuspecting victim into following a malicious URI to exploit this issue.

The following example URI is available:

http://www.example.com/tiki/files/ZeroClipboard.swf?id=\"))}catch(e{alert(document.domain);}//&width&height

Tiki Wiki CMS Groupware 'id' Parameter Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Tiki Wiki CMS Groupware 'id' Parameter Cross Site Scripting Vulnerability

References:

• New Versions of all supported versions of Tiki Wiki CMS Groupware (Tiki Software Community Association)
  
• Tiki Wiki CMS Groupware Homepage (Tiki Wiki CMS Groupware)
  
• Vulnerability Note VU#450646 Tiki Wiki CMS Groupware version 11.0 contains a cro (CERT)