PT-2006-1849 · Postnuke · Postnuke

Maksymilian Arciemowicz · Published 2006-02-20 · Updated 2017-07-20 · CVE-2006-0800

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PostNuke versions 0.761 and earlier

Description The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character. This character is interpreted as a ">" character by some web browsers but bypasses the blacklist protection in certain functions, including the pnVarCleanFromInput function in pnAPI.php, the pnSecureInput function in pnAntiCracker.php, and the htmltext parameter in an edituser operation to user.php.

Recommendations For PostNuke versions 0.761 and earlier, consider disabling the pnVarCleanFromInput function, the pnSecureInput function, and restricting access to the htmltext parameter in the edituser operation to user.php until a patch is available. Avoid using HTML tags with a trailing "<" character in the affected functions and parameters to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2006-0800

Affected Products

Postnuke

References · 9

• 🔥 https://exploit-db.com/exploits/27254 · Exploit
• 🔥 http://securityfocus.com/bid/16752 · Exploit
• http://secunia.com/advisories/18937 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0673 · Vendor Advisory
• http://news.postnuke.com/index.php?name=News&file=article&sid=2754 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0800 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24823 · Note
• http://securityreason.com/securityalert/454 · Note