HIO-2009-1114 Pligg 1.0.2 Multiple Vulnerabilities PDF Print E-mail

Pligg 1.0.2 and earlier contains multiple flaws that allow cross-site scripting, cross-site request forgery and open redirection

 

1) XSS: Input passed via the referrer HTTP header to multiple scripts is not properly sanitised before being returned to the user. These can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site:

/pligg/admin/admin_config.php
/pligg/admin/admin_modules.php
/pligg/delete.php
/pligg/editlink.php
/pligg/submit.php
/pligg/submit_groups.php
/pligg/user_add_remove_links.php
/pligg/user_settings.php
 

2) CSRF: The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can be exploited to e.g. create administrative users, when a logged-in administrative user visits a malicious web page.

 

3)Open redirection: Open redirection is allowed at /pligg/login.php at the return parameter and /pligg/user_settings.php in the referer HTTP header.

 

References:

CVE-2009-pending

BID: 37185

FrSIRT: N/A

Nessus:N/A

OSVDB: 60597 , 60598 , 60599 , 60600 , 60601 , 60602 , 60603 , 60604 , 60605 , 60606 , 60607  

SA: 37349  

XF: 54509

Related: 

Vendor Solution:Upgrade to 1.0.3


 
< Prev   Next >
[ Back ]