full-disclosure

Open Source and information security mailing list archives

Message-ID: <CAFQNZ6rGfF37sJjSCowasEsZto39XUfYBKGNLAeKAx38sEiJYw@mail.gmail.com>
Date: Tue, 12 Jan 2016 20:43:11 +0100
From: "NaxoneZ ." <naxonez@...il.com>
To: fulldisclosure@...lists.org
Subject: [FD]  Html injection Dolibarr 3.8.3

# Title: HTML Injection in dolibarr
# Author: Sergio Galán - @NaxoneZ
# Date: Dec 24,2015
# Vendor Homepage: *http://www.dolibarr.es/ <http://www.dolibarr.es/>*
# Vulnerable version: < 3.8.3
# CVE: CVE-2015-8685

Dolibarr no properly escape untrusted data to prevent injection in the
text fields.

Any examples of fields affected are the parameter url from external
calendar or the bank's name field (maybe others can be affected).

[*] Poc
You only need to inject the script code in this field like a:

"> < img src='http://www.xxx.com >

More Info
=======https://github.com/Dolibarr/dolibarr/issues/4291

Fixed
=======

https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives