ImpressCMS Arbitrary File Access And Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	65279
Class:	Input Validation Error
CVE:	CVE-2014-1836
Remote:	Yes
Local:	No
Published:	Jan 31 2014 12:00AM
Updated:	Mar 19 2015 09:42AM
Credit:	Pedro Ribeiro
Vulnerable:
Not Vulnerable:

ImpressCMS Arbitrary File Access And Multiple Cross Site Scripting Vulnerabilities

ImpressCMS is prone to an arbitrary file-access and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to delete arbitrary files, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

ImpressCMS 1.3.5 is vulnerable; other versions may also be affected.

ImpressCMS Arbitrary File Access And Multiple Cross Site Scripting Vulnerabilities

An attacker can use a browser to exploit these issues.

The following exploit data is available:

• /data/vulnerabilities/exploits/65279.txt

ImpressCMS Arbitrary File Access And Multiple Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ImpressCMS Arbitrary File Access And Multiple Cross Site Scripting Vulnerabilities

References:

• ImpressCMS Project Homepage (ImpressCMS)