DotProject Unspecified Parameters Cross-Site Scripting Vulnerability

TITLE: DotProject Unspecified Parameters Cross-Site Scripting Vulnerability
CLASS: Input Validation Error
CVE: CVE-2007-3226

REMOTE: Yes
LOCAL: No
PUBLISHED: Jun 14 2007 12:00AM
UPDATE: Jun 15 2007 09:29AM
CREDIT: Fukumori discovered this issue.
VULNERABLE:

Dotproject Dotproject 2.0.4
Dotproject Dotproject 2.0.3
Dotproject Dotproject 2.0.1
Dotproject Dotproject 2.0
NOT VULNERABLE:
Dotproject Dotproject 2.1-rc2

Vai alla pagina originale su Security Focus

Discussion

dotProject is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 2.0.4 and prior are vulnerable.

Exploit

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Solution

Solution:
The vendor has released version 2.1-rc2 to address this issue; please see the reference section for details.


Dotproject Dotproject 2.0


Dotproject Dotproject 2.0.1

Dotproject Dotproject 2.0.3

Dotproject Dotproject 2.0.4

References

References:

PhpLog

BNLug Benevento Linux Users Group