Re: CVE Request -- Contenido 4.9.x - 4.9.5 -- Reflecting XSS vulnerability in exception handler with deactivated AMR function

[cve-assign () mitre org]

On Sat, 3 Jan 2015, Steffen R??semann wrote:

> Hello Josh, Steve, vendors, list.
>
> I found a reflecting XSS vulnerability in the exception handler function of
> CMS Contenido, which affects all versions from 4.9.x to 4.9.5 when using
> having disabled advanced mod rewrite (AMR) function, which is used for
> generating SEO-friendly URLs.
>
> The vulnerability can be triggered by submitting arbitrary HTML- and/or
> JavaScriptcode in parameters "idcat", "idart" and "lang" to the PHP file
> front_content.php.
>
> Can you assign a CVE ID for it please?
>
> [1] http://sroesemann.blogspot.de/2014/12/sroeadv-2014-03.html
> [2]
> http://sroesemann.blogspot.de/2014/12/report-for-advisory-sroeadv-2014-03.html
> [3] http://www.contenido.org/de/cms/CONTENIDO/News/index-c-2044-3.html
> [4] http://seclists.org/fulldisclosure/2014/Dec/111

Use CVE-2014-9433.

---

CVE assignment team, MITRE CVE Numbering Authority M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]