S9y serendipity up to 1.6.1 serendipity[textarea] cross site scripting

Summaryinfo

A vulnerability categorized as problematic has been discovered in S9y serendipity. This affects an unknown function. The manipulation of the argument serendipity[textarea] results in cross site scripting. This vulnerability was named CVE-2012-2331. The attack may be performed from remote. In addition, an exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in S9y serendipity (Content Management System). Affected is an unknown functionality. The manipulation of the argument serendipity[textarea] with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. CVE summarizes:

Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).

The weakness was presented 08/13/2012 (Website). The advisory is shared for download at github.com. This vulnerability is traded as CVE-2012-2331 since 04/19/2012. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details and a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1059.007.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 1.3 eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (18884), SecurityFocus (BID 53418†) and Secunia (SA49009†). See VDB-61609 for similar entry. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Content Management System

Vendor

• S9y

Name

• serendipity

Version

• 0.3
• 0.4
• 0.7
• 0.7.1
• 0.8
• 0.8.1
• 0.8.2
• 0.8.3
• 0.8.4
• 0.8.5
• 0.9
• 0.9.1
• 1.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.1
• 1.1.1
• 1.1.2
• 1.1.3
• 1.1.4
• 1.2.1
• 1.3.1
• 1.4.1
• 1.5.1
• 1.5.2
• 1.5.3
• 1.5.4
• 1.5.5
• 1.6
• 1.6.1

License

• free

Website

• Product: https://github.com/s9y/Serendipity/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion