Full Disclosure mailing list archives
Html injection Dolibarr 3.8.3
From: "NaxoneZ ." <naxonez () gmail com>
Date: Tue, 12 Jan 2016 20:43:11 +0100
# Title: HTML Injection in dolibarr # Author: Sergio Galán - @NaxoneZ # Date: Dec 24,2015 # Vendor Homepage: *http://www.dolibarr.es/ <http://www.dolibarr.es/>* # Vulnerable version: < 3.8.3 # CVE: CVE-2015-8685 Dolibarr no properly escape untrusted data to prevent injection in the text fields. Any examples of fields affected are the parameter url from external calendar or the bank's name field (maybe others can be affected). [*] Poc You only need to inject the script code in this field like a: "> < img src='http://www.xxx.com > More Info =======https://github.com/Dolibarr/dolibarr/issues/4291 Fixed ======= https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8 _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- Html injection Dolibarr 3.8.3 NaxoneZ . (Jan 13)