Themelogik CMSLogik 1.2.0/1.2.1 item_link cross site scripting

Summaryinfo

A vulnerability has been found in Themelogik CMSLogik 1.2.0/1.2.1 and classified as problematic. Affected is an unknown function. The manipulation of the argument item_link leads to cross site scripting. This vulnerability is documented as CVE-2013-3535. The attack can be initiated remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability was found in Themelogik CMSLogik 1.2.0/1.2.1. It has been rated as problematic. This issue affects an unknown part. The manipulation of the argument item_link with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. The summary by CVE is:

Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title parameter to admin/settings; (4) recaptcha_private or (5) recaptcha_public parameter to admin/captcha_settings; (6) fb_appid, (7) fp_secret, (8) tw_consumer_key, or (9) tw_consumer_secret parameter to admin/social_settings; (10) slug parameter to admin/gallery/save_item_settings; or (11) item_link parameter to admin/edit_menu_item_ajax. NOTE: this issue might be resultant from CSRF.

The weakness was released 05/13/2013 (Website). It is possible to read the advisory at exploit-db.com. The identification of this vulnerability is CVE-2013-3535 since 05/13/2013. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (83429), Exploit-DB (24959) and OSVDB (92322†). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Themelogik

Name

• CMSLogik

Version

• 1.2.0
• 1.2.1

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion