Cross-site Scripting (XSS) Vulnerability in Zikula Application Framework

167.1k
7
17
30
7
More
5
15

Advisory ID:	HTB23039
Product:	Zikula Application Framework
Vendor:	Zikula Software Foundation
Vulnerable Versions:	1.3.0, build #3168 and probably prior
Tested Version:	1.3.0, build #3168
Advisory Publication:	August 17, 2011 [without technical details]
Vendor Notification:	August 17, 2011
Public Disclosure:	September 7, 2011
Vulnerability Type:	Cross-Site Scripting [CWE-79]
CVE Reference:	CVE-2011-3979
Risk Level:	Low

CVSSv2 Base Score:	2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Solution Status:	Fixed by Vendor
Discovered and Provided:	High-Tech Bridge Security Research Lab
Advisory Details:
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting attacks. 1) Cross-site scripting (XSS) vulnerability in Zikula Application Framework Input passed via the "themename" parameter to "ztemp/view_compiled/Theme/theme_admin_setasdefault.php" is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a administrator's browser session in context of affected website. The following PoC code is available: http://host/index.php?module=theme&type=admin&func=setasdefault&themename=%3 Cscript%3Ealert%28document.cookie%29%3C/script%3E
How to Detect Cross-Site Scripting Vulnerabilities Website Security Test GDPR & PCI DSS Test Website CMS Security Test CSP & HTTP Headers Check WordPress & Drupal Scanning Try For Free Solution:
Upgrade to Zikula 1.3.1 More information: https://github.com/zikula/core/commit/d6e6c283f18b3dcb7e92b46a7ad63fc7c7e112e2 https://github.com/zikula/core/commit/564ab97067d5e71f0df6ab2bb1d2b0d385cc27a7

References:
[1] High-Tech Bridge Advisory HTB23039 - https://www.immuniweb.com/advisory/HTB23039 - Cross-site Scripting (XSS) Vulnerability in Zikula Application Framework [2] Zikula - zikula.org- Zikula is an open source MVC web application framework, released under the LGPLv3, that allows you to rapidly build websites for any application. [3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/ - international in scope and free for public use, CVE® is a dictionary of publicly known information security vulnerabilities and exposures. [4] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types.

Related Security Advisories: HTB22348: Multiple vulnerabilities in Zikula Application Framework

Previous Security Advisories with CWE-79:

HTB23038: Cross-site Scripting (XSS) Vulnerability in Redirection WordPress Plugin

HTB23037: Cross-site Scripting (XSS) Vulnerability WP Events Calendar

167.1k
7
17
30
7
More
5
15

Have additional information to submit?
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.