[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CAMWaY3N8yZjXSkt4DbxC2DKg6qoVx0-ruwaMxai63EKM8VROPA@mail.gmail.com>
Date: Fri, 18 Dec 2015 08:12:05 +0000
From: CSW Research Lab <disclose@...ersecurityworks.com>
To: "fulldisclosure-request@...lists.org" <fulldisclosure-request@...lists.org>,
"vuln@...unia.com" <vuln@...unia.com>,
"submissions@...ketstormsecurity.com" <submissions@...ketstormsecurity.com>,
"bugs@...uritytracker.com" <bugs@...uritytracker.com>,
"oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: [FD] [CVE-2015-8606] SilverStripe CMS & Framework v3.2.0 - Cross-Site
Scripting Vulnerability
=======[SilverStripe CMS & Framework v3.2.0 – Cross-Site Scripting
Vulnerability
================================================================
Information
**********************
Vulnerability Type : Cross Site Scripting Vulnerability
Vulnerable Version : 3.2.0
Severity: Medium
Author – Arjun Basnet
CVE-ID: CVE-2015-8606
Homepage: https://www.silverstripe.org/download/
Description
***********************
SilverStripe CMS is prone to Cross-site scripting vulnerability because it
fails to sanitize user-supplied input. An attacker may leverage this issue
to execute arbitrary script code
in the browser of an unsuspecting user of the affected site.
Proof of Concept URL
***************************
[+]
http://192.168.56.101/SilverStripe/admin/security/EditForm/field/Members/item/new/ItemEditForm
Severity Level:
=========================================================
Medium
Description:
==========================================================
Vulnerable Product:
[+] SilverStripe CMS & Framework v3.2.0
Vulnerable Parameter(s):
[+] Locale
[+] FailedLoginCount
Report Timeline
************************
05-Nov-2015- Reported
11-Nov-2015- Vendor Response
16-Nov-2015- Vendor Fixed
13-Dec-2015- Public disclosed
Fixed Version:
*****************
[+] SilverStripe CMS & Framework v3.2.1
References
*****************
[+] http://www.silverstripe.org/download/security-releases/ss-2015-026
[+] https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)
Credits & Authors
--------------------
Arjun Basnet from Cyber Security Works Pvt. Ltd. (
http://cybersecurityworks.com)
About Cybersecurityworks
--------------------------------------------
Cybersecurity Works is basically an auditing company passionate working on
findings & reporting security flaws & vulnerabilities on web application
and network. As professionals, we handle each client differently based on
their unique requirements. Visit our website
http://www.cybersecurityworks.com/ for more information.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
