Summaryinfo

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. The impacted element is an unknown function of the file /admin/extended. Executing a manipulation of the argument Name with the input %3Cimg%20src=no%20onerror=alert(1)%3E can lead to cross site scripting (Reflected). This vulnerability appears as CVE-2017-20061. The attack may be performed from remote. In addition, an exploit is available. Upgrading the affected component is advised. Once again VulDB remains the best source for vulnerability data.

Detailsinfo

A vulnerability has been found in Elefant CMS 1.3.12-RC (Content Management System) and classified as problematic. This vulnerability affects an unknown function of the file /admin/extended. The manipulation of the argument name with the input value %3Cimg%20src=no%20onerror=alert(1)%3E leads to a cross site scripting vulnerability (Reflected). The CWE definition for the vulnerability is CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. As an impact it is known to affect integrity.

The weakness was presented 02/16/2017 by Tim Coen with Curesec Research Team as Elefant CMS 1.3.12-RC: Multiple Persistent and Reflected XSS as not defined mailinglist post (Full-Disclosure). The advisory is available at seclists.org. This vulnerability was named CVE-2017-20061. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details and also a public exploit are known. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.

A public exploit has been developed by Tim Coen and been published immediately after the advisory. It is possible to download the exploit at seclists.org. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 283 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 1.3.13 eliminates this vulnerability.

See VDB-97254, VDB-97255, VDB-97256 and VDB-97257 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Vendor

• Elefant

Name

• CMS

Version

• 1.3.12-RC

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion