Cross-Site Scripting (XSS) in Offiria

2014-04-0200:00:00

High-Tech Bridge

www.htbridge.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

63.7%

JSON

High-Tech Bridge Security Research Lab discovered vulnerability in Offiria, which can be exploited to perform Cross-Site Scripting (XSS) attacks against users of vulnerable application.

Reflected Cross-Site Scripting (XSS) in Offiria: CVE-2014-2689

The vulnerability exists due to insufficient sanitisation of user-supplied data in URI after “/installer/index.php” script that is not removed from the system by default. A remote attacker can trick a logged-in user to open a specially crafted link and execute arbitrary HTML and script code in browser in context of the vulnerable website.

The following exploitation example displays “immuniweb” word:
http://[host]/installer/index.php/%22onmouseover%3d%22alert%28%27immuniweb%2 7%29;%22%3d%22%3E