Multiple Cross-Site Scripting Vulnerabilities in Zenphoto

vendor:

Zenphoto

by:

Unknown

7.5

CVSS

HIGH

Cross-Site Scripting (XSS)

CWE

Product Name: Zenphoto

Affected Version From: 1.4.0.3

Affected Version To: Unknown

Patch Exists: NO

Related CWE: CVE-2011-2514

CPE: a:zenphoto:zenphoto:1.4.0.3

Metasploit: https://www.rapid7.com/db/vulnerabilities/suse-cve-2011-2514/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2011-1100/

Other Scripts:

Platforms Tested:

Unknown

Multiple Cross-Site Scripting Vulnerabilities in Zenphoto

The Zenphoto application is vulnerable to multiple cross-site scripting (XSS) vulnerabilities due to inadequate sanitization of user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary script code in the context of an unsuspecting user's browser, potentially leading to the theft of authentication credentials and other malicious activities.

Mitigation:

To mitigate these vulnerabilities, it is recommended to update Zenphoto to the latest version available. Additionally, input validation and sanitization should be implemented to ensure that user-supplied data is properly sanitized before being processed.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/47528/info

Zenphoto is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Zenphoto 1.4.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/themes/zenpage/slideshow.php?_zp_themeroot=%22%3E%3Cscript%3Ealert%28%22XSS%22%29;%3C/script%3E

http://www.example.com/themes/stopdesign/comment_form.php?_zp_themeroot=%22%3E%3Cscript%3Ealert%28%22XSS%22%29;%3C/script%3E