A vulnerability, which was classified as problematic, has been found in Habari CMS 0.9.2 (Content Management System). This issue affects some unknown functionality of the file /habari/admin/comment of the component Comment Handler. The manipulation of the argument comment_name with an unknown input leads to a cross site scripting vulnerability (Persistent). Using CWE to declare the problem leads to CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is integrity.

The weakness was presented 11/09/2016 by Benjamin Kunz Mejri as VL-ID 1999 as confirmed advisory (Website). It is possible to read the advisory at vulnerability-lab.com. The exploitation is known to be easy. The attack may be initiated remotely. A simple authentication is required for exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

A public exploit has been developed by Benjamin Kunz Mejri and been published immediately after the advisory. The exploit is available at vulnerability-lab.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See 93684 for similar entry.

Productinfo

Type

• Content Management System

Vendor

• Habari

Name

• CMS

Version

• 0.9.2

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion