Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

S21SEC-041-en:Cezanne SW Cross-Site Scripting
From: "S21sec labs" <s21seclabs () s21sec com>
Date: Mon, 14 Apr 2008 21:23:56 +0200 (CEST)

##############################################################

- S21Sec Advisory -

##############################################################

Title: Cezanne SW Cross-Site Scripting
ID: S21SEC-041-en
Severity: Medium
History:
  02.Jan.2008 Vulnerability discovered
Authors:
  Juan de la Fuente Costa (jfuente () s21sec com)
  Fco Javier Puerta Rubio (fjpuerta () s21sec com)
URL: http://www.s21sec.com/avisos/s21sec-41-en.txt


[ SUMMARY ]

Cezanne develops Human Capital Management Software.

This Software provides leading-edge Human Capital Management solutions
that help companies better develop, manage, reward and retain their most
important asset - their people.

Cezanne include applications for employee performance management, career &
succession planning, training & development, people management,
recruitment, salary analysis & compensation planning, pay review, employee
survey and organization charting.


[ AFFECTED VERSIONS ]

This vulnerability has been tested in Cezanne 6.5.1, and Cezanne 7.


[ DESCRIPTION ]

S21sec has discovered a vulnerability in Cezanne 6.5.1/Cezanne 7 that
allows injecting JavaScript code in text variables.

This issue allows javascript code execution in the user browser.

The identified parameter is: "SleUserName"

URL: https://www.somesite.es/cezanneweb/CFLogon/CFLogon.asp
     (Use a Proprietary Account)

HTTP METHOD:POST
STRING:')"><script>alert("S21sec")</script>


[ WORKAROUND ]

Contact with Cezanne Software at: http://www.cezannesw.com/


[ ACKNOWLEDGMENTS ]

This vulnerability has been discovered and researched by:
- Juan de la Fuente Costa S21Sec
- Fco Javier Puerta Rubio S21Sec

You can find the last version of this warning in:

http://www.s21sec.com/es/avisos/s21sec-041-en.txt

http://www.s21sec.com
http://blog.s21sec.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • S21SEC-041-en:Cezanne SW Cross-Site Scripting S21sec labs (Apr 14)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault