Cross-site Scripting (XSS) Vulnerability in Zikula Application Framework

This vulnerability was discovered by our security researchers before 2019.

167.1k
7
17
30
7
More
5
15

Advisory ID:	HTB23039
Product:	Zikula Application Framework
Vendor:	Zikula Software Foundation
Vulnerable Versions:	1.3.0, build #3168 and probably prior
Tested Version:	1.3.0, build #3168
Advisory Publication:	August 17, 2011 [without technical details]
Vendor Notification:	August 17, 2011
Public Disclosure:	September 7, 2011
Vulnerability Type:	Cross-Site Scripting [CWE-79]
CVE Reference:	CVE-2011-3979
Risk Level:	Low

CVSSv2 Base Score:	2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Solution Status:	Fixed by Vendor
Discovered and Provided:	High-Tech Bridge Security Research Lab
Advisory Details:
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting attacks. 1) Cross-site scripting (XSS) vulnerability in Zikula Application Framework Input passed via the "themename" parameter to "ztemp/view_compiled/Theme/theme_admin_setasdefault.php" is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a administrator's browser session in context of affected website. The following PoC code is available: http://host/index.php?module=theme&type=admin&func=setasdefault&themename=%3 Cscript%3Ealert%28document.cookie%29%3C/script%3E
ImmuniWeb® AI Platform Test your application security with our award-winning AI technology and a contractual zero false-positives SLA: Get a Demo ImmuniWeb® Neuron Premium Web Application Security Scanning ImmuniWeb® On-Demand Compliance-Ready Web Penetration Testing ImmuniWeb® Continuous Continuous Web Scanning and Penetration Testing Get a Demo Solution:
Upgrade to Zikula 1.3.1 More information: https://github.com/zikula/core/commit/d6e6c283f18b3dcb7e92b46a7ad63fc7c7e112e2 https://github.com/zikula/core/commit/564ab97067d5e71f0df6ab2bb1d2b0d385cc27a7

ImmuniWeb® AI Platform Test your application security with our award-winning AI technology and a contractual zero false-positives SLA: Get a Demo Get your free cyber risk exposure assessment ImmuniWeb® Discovery Continuous Threat Exposure Management ImmuniWeb® Neuron Premium Web Application Security Scanning ImmuniWeb® On-Demand Compliance-Ready Web Penetration Testing Get a Demo Get your free cyber risk exposure assessment
References:
[1] High-Tech Bridge Advisory HTB23039 - https://www.immuniweb.com/advisory/HTB23039 - Cross-site Scripting (XSS) Vulnerability in Zikula Application Framework [2] Zikula - zikula.org- Zikula is an open source MVC web application framework, released under the LGPLv3, that allows you to rapidly build websites for any application. [3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/ - international in scope and free for public use, CVE® is a dictionary of publicly known information security vulnerabilities and exposures. [4] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types.

Related Security Advisories: HTB22348: Multiple vulnerabilities in Zikula Application Framework

Previous Security Advisories with CWE-79:

HTB23038: Cross-site Scripting (XSS) Vulnerability in Redirection WordPress Plugin

HTB23037: Cross-site Scripting (XSS) Vulnerability WP Events Calendar

167.1k
7
17
30
7
More
5
15

Have additional information to submit?
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.