exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Project'Or RIA 3.4.0 Cross Site Scripting

Project'Or RIA 3.4.0 Cross Site Scripting
Posted Nov 5, 2013
Authored by Vicente Aguilera Diaz

Project'Or RIA version 3.4.0 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
advisories | CVE-2013-6163
SHA-256 | 4939ebe50ee1824f871a19246958da91b44eab3ea21fdd422e8494f230995c9a

Project'Or RIA 3.4.0 Cross Site Scripting

Change Mirror Download
=============================================
INTERNET SECURITY AUDITORS ALERT 2013-018
- Original release date: July 26th, 2013
- Last revised: July 26th, 2013
- Discovered by: Vicente Aguilera Diaz
- Severity: 4.3/10 (CVSSv2 Base Scored)
- CVE-ID: CVE-2013-6163
=============================================

I. VULNERABILITY
-------------------------
Multiple XSS vulnerabilities in "Project'Or RIA".


II. BACKGROUND
-------------------------
Project'Or RIA is an open source Project Management Software, trying to
gather in a single tool every functionality needed to organize your
projects.
The objective is to keep it simple, easy to use on a day to day
activity, while covering most of the project management functionalities.


III. DESCRIPTION
-------------------------
Has been detected multiple XSS vulnerability.

The affected resources and parameters are the following:

Resource 1:
/view/parameter.php

Parameter:
type

Resource 2:
/view/main.php

Parameter:
p1value

Resource 3:
/view/objectDetail.php

Parameter:
objectClass


These vulnerabilities allows the execution of arbitrary HTML/script code
to be executed in the context of the victim user's browser.


IV. PROOF OF CONCEPT
-------------------------
A malicious user can inject arbitrary HTML/script code in the affected
parameters.

Example 1 (GET Request):
http://<projectorria-server>/view/parameter.php?type="><H1><marquee>This+is+an+XSS+example<!--

Example 2 (GET Request):
http://<projectorria-server>/view/main.php?directAccessPage=parameter.php&menuActualStatus=visible&p1name=test&p1value=");alert(document.cookie);

Example 3 (POST Request):
POST /view/objectDetail.php?destinationWidth=1017 HTTP/1.1
Host: <projectorria-server>

objectClass=Affectation<H1><marquee>This+is+an+XSS+example<!--&objectId=42&listIdFilter=&listFilterClause=



V. BUSINESS IMPACT
-------------------------
An attacker can execute arbitrary HTML or script code in a targeted
user's browser, this can leverage to steal sensitive information as user
credentials,

personal data, etc.


VI. SYSTEMS AFFECTED
-------------------------
Tested in Project'Or RIA v3.4.0


VII. SOLUTION
-------------------------
Install new version.


VIII. REFERENCES
-------------------------
http://projectorria.org
http://www.isecauditors.com


IX. CREDITS
-------------------------
This vulnerability has been discovered
by Vicente Aguilera Diaz (vaguilera (at) isecauditors (dot) com).


X. REVISION HISTORY
-------------------------
July 26, 2013: Initial release


XI. DISCLOSURE TIMELINE
-------------------------
July 25, 2013: Vulnerability acquired by
Internet Security Auditors (www.isecauditors.com).
September 26, 2013: Sent to project support.
November 03, 2013: New release and disclosure.


XII. LEGAL NOTICES
-------------------------
The information contained within this advisory is supplied "as-is" with
no warranties or guarantees of fitness of use or otherwise. Internet
Security

Auditors accepts no responsibility for any damage caused by the use or
misuse of this information.


XIII. ABOUT
-------------------------
Internet Security Auditors is a Spain based leader in web application
testing, network security, penetration testing, security compliance
implementation and

assessing. Our clients include some of the largest companies in areas
such as finance, telecommunications, insurance, ITC, etc. We are vendor
independent

provider with a deep expertise since 2001. Our efforts in R&D include
vulnerability research, open security project collaboration and
whitepapers,

presentations and security events participation and promotion. For
further information regarding our security services, contact us.
Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    17 Files
  • 21
    May 21st
    18 Files
  • 22
    May 22nd
    7 Files
  • 23
    May 23rd
    111 Files
  • 24
    May 24th
    27 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    6 Files
  • 28
    May 28th
    12 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close