DotClear 多个跨站脚本攻击漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1112682 漏洞类型 跨站脚本
发布时间 2007-04-11 更新时间 2007-04-13
CVE编号 CVE-2007-1989 CNNVD-ID CNNVD-200704-221
漏洞平台 PHP CVSS评分 4.3
|漏洞来源
https://www.exploit-db.com/exploits/29839
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200704-221
|漏洞详情
DotClear中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到ecrire/trackback.php的(1)post_id参数或到tools/thememng/index.php的(2)tool_url参数,注入任意的web脚本或HTML。
|漏洞EXP
source: http://www.securityfocus.com/bid/23411/info
 
DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to 1.2.6 are vulnerable. 

http://www.example.com/tools/thememng/index.php?tool_url=[XSS]
|参考资料

来源:www.dotclear.net
链接:http://www.dotclear.net/log/post/2007/04/10/Dotclear-126
来源:www.dotclear.net
链接:http://www.dotclear.net/forum/viewtopic.php?id=26573
来源:SECUNIA
名称:24829
链接:http://secunia.com/advisories/24829
来源:XF
名称:dotclear-tools-xss(33616)
链接:http://xforce.iss.net/xforce/xfdb/33616
来源:XF
名称:dotclear-trackback-xss(33615)
链接:http://xforce.iss.net/xforce/xfdb/33615
来源:BID
名称:23411
链接:http://www.securityfocus.com/bid/23411
来源:VUPEN
名称:ADV-2007-1338
链接:http://www.frsirt.com/english/advisories/2007/1338
来源:FULLDISC
名称:20070412Dotclear1.*CrossSiteScriptingVulnerability
链接:http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053720.html