Description
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the (1) group and (2) members parameters in (a) NewGroup.jsp; the (3) edittime parameter in (b) Edit.jsp; the (4) edittime, (5) author, and (6) link parameters in (c) Comment.jsp; the (7) loginname, (8) wikiname, (9) fullname, and (10) email parameters in (d) UserPreferences.jsp and (e) Login.jsp; the (11) r1 and (12) r2 parameters in (f) Diff.jsp; and the (13) changenote parameter in (g) PageInfo.jsp.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 6
- JSPWiki 2.5.139 - 'NewGroup.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-30608 · webapps · Sep 25, 2007 · verified
- JSPWiki 2.5.139 - 'edit.jsp?edittime' Cross-Site Scripting EDB-30609 · webapps · Sep 25, 2007 · verified
- JSPWiki 2.5.139 - 'Comment.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-30610 · webapps · Sep 25, 2007 · verified
- JSPWiki 2.5.139 - 'UserPreferences.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-30611 · webapps · Sep 25, 2007 · verified
- JSPWiki 2.5.139 - 'Login.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-30612 · webapps · Sep 25, 2007 · verified
- JSPWiki 2.5.139 - 'Diff.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-30613 · webapps · Sep 25, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 25803 vdb-entry
- 20070925 JSPWiki Multiple Vulnerabilities mailing-list
- http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog
- 3167 third-party-advisory
- jspwiki-multiple-xss(36766) vdb-entry
- 20070924 JSPWiki Multiple Input Validation Vulnerabilities mailing-list
- 26961 third-party-advisory