PT-2019-7195 · Zenphoto · Zenphoto

Tim Coen + 1 · Published 2019-12-31 · Updated 2020-01-07 · CVE-2015-5593

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.9

Description The issue arises from the sanitize string function not properly sanitizing HTML tags, allowing remote attackers to perform a cross-site scripting (XSS) attack. This can be achieved by wrapping a payload in malformed HTML tags, such as "<script>payload", or by using an image tag with the payload as the onerror event.

Recommendations For versions prior to 1.4.9, update to version 1.4.9 or later to resolve the issue. As a temporary workaround, consider disabling the sanitize string function or restricting its use until a patch is available. Avoid using the sanitize string function to sanitize user-inputted HTML tags until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-5593

Affected Products

Zenphoto

References · 4

• 🔥 http://openwall.com/lists/oss-security/2015/07/18/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5593 · Security Note
• http://zenphoto.org/news/zenphoto-1.4.9 · Note
• https://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto · Note