PT-2014-3572 · Pivotx · Pivotx

Diego García · Publicado 2014-04-15 · Atualizado 2015-07-24 · CVE-2014-0341

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.3.9

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific fields, including the title field to certain template files, an event field, email field, or nickname field. This can be achieved by accessing specific endpoints, such as objects.php or pages.php, and manipulating the title, event, email, or nickname fields.

Recommendations For PivotX versions prior to 2.3.9, update to version 2.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the templates internal/pages.tpl, templates internal/home.tpl, templates internal/entries.tpl, and templates internal/users.tpl templates, as well as limiting input to the title, event, email, and nickname fields in objects.php and pages.php.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-0341

Produtos afetados

Pivotx

Referências · 8

• 🔥 http://sourceforge.net/p/pivot-weblog/code/4349 · Exploit
• 🔥 http://sourceforge.net/p/pivot-weblog/code/4345 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-0341 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0341 · Nota
• http://kb.cert.org/vuls/id/901156 · Nota
• http://pivotx.net/page/security · Aviso do Fabricante
• http://blog.pivotx.net/archive/2014/03/03/pivotx-239-released · Nota
• http://securityfocus.com/bid/66800 · Nota