Vulners
Lucene search
e107 CMS 1.0.2 Cross Site Scripting
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2013-2750 | 3 Apr 201300:00 | – | circl |
 | CVE-2013-2750 | 22 Jan 201419:00 | – | cve |
 | CVE-2013-2750 | 22 Jan 201419:00 | – | cvelist |
 | e107 content_preset.php URI XSS | 13 May 201300:00 | – | nessus |
 | EUVD-2013-2689 | 7 Oct 202500:30 | – | euvd |
 | CVE-2013-2750 | 22 Jan 201419:55 | – | nvd |
 | e107 query Cross Site Scripting Vulnerability | 28 Jan 201400:00 | – | openvas |
 | Cross site scripting | 22 Jan 201419:55 | – | prion |
 | TC-SA-2013-01: Reflected Cross-Site-Scripting (XSS) vulnerability in e107 CMS v1.0.2 | 6 May 201300:00 | – | securityvulns |
| Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 6 May 201300:00 | – | securityvulns |
10
`TC-SA-2013-01: Reflected Cross-Site-Scripting (XSS) vulnerability
in e107 CMS v1.0.2
Published: 2013/04/03
Version 1.0
Affected Products:
e107 version 1.0.2 (others not tested)
http://www.e107.org
References:
TC-SA-2013-01 www.tele-consulting.com/advisories/TC-SA-2013-01.txt
(used for updates)
CVE-2013-2750 - Reflected Cross-Site-Scripting (XSS) vulnerability
in e107 CMS v1.0.2
Summary:
"e107 is a free (open-source) content management system allowing
you to easily manage and publish your content. Developers can
save time in building websites and powerful online applications.
Users can avoid programming completely!" (www.e107.org)
The content_preset.php Script in e107 CMS is vulnerable to
reflected Cross-Site-Scripting (XSS) attacks. Malicious code is
not sanitized when using "%00" in conjuction with "%0d%0a"
within GET-Parameter.
Effect:
Under certain circumstances it is possible that attackers may
inject arbitrary script code e. g. to steal authentication data.
Vulnerable Scripts:
/e107_plugins/content/handlers/content_preset.php
Examples:
http://[host]/e107_plugins/content/handlers/content_preset.php?
%3c%00script%0d%0a>alert('reflexted%20XSS')</script>
Possible Solutions:
Use e107 v1.0.3 (contains updated content_preset.php)
Affected products:
e107 1.0.2 (older releases have not been tested)
Disclosure Timeline:
2013/02/18 vendor contacted via email
2013/02/18 initial response
2013/03/04 proposed fix by vendor
2013/03/08 second proposed fix by vendor
2013/03/13 fix confirmed
2013/03/14 vendor released update 1.0.3
2013/04/03 Public disclosure
Credits
Simon Bieber ([email protected])
Tele-Consulting security networking training GmbH
www.tele-consulting.com
Disclaimer:
All information is provided without warranty. The intent is to
provide information to secure infrastructure and/or systems, not
to be able to attack or damage. Therefore Tele-Consulting shall
not be liable for any direct or indirect damages that might be
caused by using this information.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Apr 2013 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.00533