DokuWiki "ns" Cross-Site Scripting Vulnerability

SA49196

CVE-2012-0283

13 Jul 2012

Less Critical

Vendor Patch

DokuWiki

From remote

Cross-Site Scripting

Cross-Site Scripting vulnerabilities allow a third party to manipulate the content or behaviour of a web application in a user's browser, without compromising the underlying system.

Different Cross-Site Scripting related vulnerabilities are also classified under this category, including "script insertion" and "cross-site request forgery".

Cross-Site Scripting vulnerabilities are often used against specific users of a website to steal their credentials or to conduct spoofing attacks.

Secunia Research has discovered a vulnerability in DokuWiki, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "ns" POST parameter in lib/exe/ajax.php (when "call" is set to "medialist" and "do" is set to "media") is not properly sanitised within the "tpl_mediaFileList()" function in inc/template.php before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is confirmed in version 2012-01-25a. Prior versions may also be affected.

Update to version 2012-01-25b.

Secunia Research.

DokuWiki:
http://bugs.dokuwiki.org/index.php?do=details&task_id=2561

Secunia Research:
http://secunia.com/secunia_research/2012-24/