PT-2019-7195 · Zenphoto · Zenphoto

Tim Coen + 1 · Publicado 2019-12-31 · Atualizado 2020-01-07 · CVE-2015-5593

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.9

Description The issue arises from the sanitize string function not properly sanitizing HTML tags, allowing remote attackers to perform a cross-site scripting (XSS) attack. This can be achieved by wrapping a payload in malformed HTML tags, such as "<script>payload", or by using an image tag with the payload as the onerror event.

Recommendations For versions prior to 1.4.9, update to version 1.4.9 or later to resolve the issue. As a temporary workaround, consider disabling the sanitize string function or restricting its use until a patch is available. Avoid using the sanitize string function to sanitize user-inputted HTML tags until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-5593

Produtos afetados

Zenphoto

Referências · 4

• 🔥 http://openwall.com/lists/oss-security/2015/07/18/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5593 · Nota de Segurança
• http://zenphoto.org/news/zenphoto-1.4.9 · Nota
• https://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto · Nota