DKret Search Widget HTML Injection Vulnerability

TITLE: DKret Search Widget HTML Injection Vulnerability
CLASS: Input Validation Error
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: Jun 18 2007 12:00AM
UPDATE: Jun 18 2007 12:00AM
CREDIT: The vendor reported this vulnerability.
VULNERABLE:

dKret dKret Theme for Wordpress 2.5
dKret dKret Theme for Wordpress 2.4

NOT VULNERABLE:

dKret dKret Theme for Wordpress 2.7
dKret dKret Theme for Wordpress 2.6

Vai alla pagina originale su Security Focus

Discussion

dKret is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

This issue affects dKret versions prior to 2.6.

Exploit

Attackers can use a browser to exploit this issue.

Solution

Solution:
The vendor released an update to address this issue. Please see the references for more information.


dKret dKret Theme for Wordpress 2.5

• dKret dkret2.7.zip
  http://downloads.sourceforge.net/dkret/dkret2.7.zip

dKret dKret Theme for Wordpress 2.4

• dKret dkret2.7.zip
  http://downloads.sourceforge.net/dkret/dkret2.7.zip

References

References:

• dKret change log version 2.6 (dKret)
  
• dKret Web Site (dKret)
  

PhpLog