EZ Publish Search Cross-Site Scripting Vulnerability

Bugtraq ID:	7137
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 18 2003 12:00AM
Updated:	Mar 18 2003 12:00AM
Credit:	Discovery is credited to Ertan Kurt <[email protected]>.
Vulnerable:	eZ Systems eZ publish 2.2.7
Not Vulnerable:

EZ Publish Search Cross-Site Scripting Vulnerability

eZ publish is prone to cross-site scripting attacks. This is due to insufficient sanitization of data passed to the search facility via URI parameters. As a result, it is possible for a remote user to create a malicious link to a site hosting the vulnerable software which contains hostile HTML and script code. If the link is visited, the attacker-supplied script code and HTML may be interpreted by the user's web browser. This could allow for compromise of cookie-based credentials or other possible attacks.

This issue was reported in eZ publish 2.2.7. Other versions may also be affected.

EZ Publish Search Cross-Site Scripting Vulnerability

There is no exploit required.

EZ Publish Search Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

EZ Publish Search Cross-Site Scripting Vulnerability

References:

• eZ Publish Homepage (eZ Publish)
  
• Some XSS vulns (Ertan Kurt )