WUZHI CMS 4.1.0 System Settings index.php?m=core&f=set&v=sendmail form[nickname] Persistent cross site scripting

Summaryinfo

A vulnerability categorized as problematic has been discovered in WUZHI CMS 4.1.0. This issue affects some unknown processing of the file index.php?m=core&f=set&v=sendmail of the component System Settings. Such manipulation of the argument form[nickname] as part of Parameter leads to cross site scripting (Persistent). This vulnerability is referenced as CVE-2018-14512. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in WUZHI CMS 4.1.0 (Content Management System). Affected by this issue is an unknown functionality of the file index.php?m=core&f=set&v=sendmail of the component System Settings. The manipulation of the argument form[nickname] as part of a Parameter leads to a cross site scripting vulnerability (Persistent). Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. CVE summarizes:

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server" screen, the XSS payload is triggered.

The bug was discovered 07/20/2018. The weakness was published 07/23/2018 (Website). The advisory is shared for download at github.com. This vulnerability is handled as CVE-2018-14512 since 07/22/2018. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1059.007.

The vulnerability was handled as a non-public zero-day exploit for at least 3 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-122063 and VDB-122061. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Vendor

• WUZHI

Name

• CMS

Version

• 4.1.0

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion