PT-2014-3572 · Pivotx · Pivotx

Diego García · Published 2014-04-15 · Updated 2015-07-24 · CVE-2014-0341

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.3.9

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific fields, including the title field to certain template files, an event field, email field, or nickname field. This can be achieved by accessing specific endpoints, such as objects.php or pages.php, and manipulating the title, event, email, or nickname fields.

Recommendations For PivotX versions prior to 2.3.9, update to version 2.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the templates internal/pages.tpl, templates internal/home.tpl, templates internal/entries.tpl, and templates internal/users.tpl templates, as well as limiting input to the title, event, email, and nickname fields in objects.php and pages.php.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-0341

Affected Products

Pivotx

References · 8

• 🔥 http://sourceforge.net/p/pivot-weblog/code/4349 · Exploit
• 🔥 http://sourceforge.net/p/pivot-weblog/code/4345 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-0341 · Security Note
• http://pivotx.net/page/security · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0341 · Note
• http://kb.cert.org/vuls/id/901156 · Note
• http://blog.pivotx.net/archive/2014/03/03/pivotx-239-released · Note
• http://securityfocus.com/bid/66800 · Note