Dokeos "img" Cross-Site Scripting Vulnerability

Sunday, 27 May 2007

Silentz has discovered a vulnerability in Dokeos, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "img" parameter in main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php is not properly sanitised before it is returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 1.8.0. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by:
Silentz

Original Article:
http://secunia.com/advisories/25397/