Dotclear "admin/media.php" Cross-Site Scripting Vulnerabilities


Description   (:Several cross-site scripting vulnerabilities were reported in Dotclear.:A remote attacker could exploit them by enticing their victim into following a specially crafted link in order to execute arbitrary JavaScript/HTML code.::These vulnerabilities are exploitable via the "q" and "link_type" parameters of the "admin/media.php" script page.::Proofs of concept are available.::The dotclear packages provided by Debian Jessie 8 are vulnerable.)
     
Vulnerable Products   Vulnerable OS:
GNU/Linux (Debian) - 8Vulnerable Software:
Dotclear (Dotclear) - 2.9.1
     
Solution   A patch is available on Dotclear's HG repository.
     
CVE   CVE-2016-6523
     
References   - oss-sec : CVE request: XSS vulns in Dotclear v2.9.1
http://seclists.org/oss-sec/2016/q3/223
- Debian Security Tracker : dotclear
https://security-tracker.debian.org/tracker/CVE-2016-6523
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
XSS - Prevention - GET : suspicious 'iframe' tag found in URL
3.2.0
XSS - Prevention - GET : suspicious 'meta' tag found in URL
3.2.0
XSS - Prevention - GET : suspicious tag with event found in URL
3.2.0
XSS - Prevention - GET : suspicious 'applet' tag found in URL
3.2.0
XSS - Phishing : suspicious 'div' tag found in URL
3.2.0
XSS - Prevention - GET : suspicious 'style' attribute found in URL
3.2.0
XSS - Prevention - GET : suspicious 'img' tag found in URL
3.2.0
XSS - Phishing : suspicious 'a' tag found in URL
3.2.0
XSS - Prevention - GET : cookie access attempt using script language found in URL
3.2.0
XSS - Prevention - GET : suspicious 'embed' tag found in URL
3.2.0
XSS - Prevention - GET : suspicious 'object' tag found in URL
3.2.0
XSS - Phishing : suspicious 'form' tag found in URL
3.2.0
XSS - Prevention - GET : javascript code found in URL
3.2.0
XSS - Prevention - GET : evasion attempt using tag characters encoding in URL
3.2.0
XSS - Prevention - GET : suspicious 'style' tag found in URL
3.2.0
XSS - Phishing : suspicious 'link' tag found in URL
3.2.0
XSS - Prevention - GET : 'script' tag found in URL
3.2.0
XSS - Prevention - GET : 'location' javascript object found in URL
3.2.0
XSS - Prevention - GET : suspicious 'div' tag found in URL
3.2.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2016-08-01 

 Target Type 
Client 

 Possible exploit 
Remote