Ripe Website Manager up to 0.8.4 new_menuname cross site scripting

Summaryinfo

A vulnerability identified as problematic has been detected in Ripe Website Manager up to 0.8.4. The affected element is an unknown function. The manipulation of the argument new_menuname leads to cross site scripting. This vulnerability is referenced as CVE-2007-4522. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Ripe Website Manager up to 0.8.4. This issue affects some unknown functionality. The manipulation of the argument new_menuname with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php. NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.

The weakness was published 08/24/2007 (Website). It is possible to read the advisory at securityfocus.com. The identification of this vulnerability is CVE-2007-4522 since 08/24/2007. The attack may be initiated remotely. A simple authentication is required for exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

The exploit is available at exploit-db.com. It is declared as highly functional.

The vulnerability is also documented in the databases at X-Force (36180), Exploit-DB (30518) and SecurityFocus (BID 25406†). Similar entries are available at VDB-38496, VDB-86055, VDB-86056 and VDB-86057. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• Ripe Website Manager

Version

• 0.8.0
• 0.8.1
• 0.8.2
• 0.8.3
• 0.8.4

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion