Onderwerp: EasyCMS vulnerable to XSS injection.

The Norwegian web-publishing system EasyCMS (www.easycms.no) contains multiple input flaws letting users conduct successful XSS attacks. Both in the admin section, and the webpage that uses the system is vulnerable to XSS.

It does not filter script tags and simple scripting like <script>alert(‘XSS’)</script> will work. Nearly all of the systems input boxes is open for scripting tags.

Furthermore it’s open for directory browsing ( http://<site>/images ).
The developers has been notified, and working on patching the system.

Please credit to: Preben Nyløkken

Kind of you to notice, our system will during the next week be patched for XSS flaws in the different input fields which might be of concern for XSS. The rest of the system will also be checked to reensure that all user-input is processed securely.

We take this matter seriusly, and would like to inform that you are referring to the input fields of the contact form - which outputs a reciept with the given data which was not checked for XSS, since we don't use cookies in Easy CMS.

I will update this post when we have more news on this upcomming security update.

regards,
Kim Steinhaug
Easy CMS developer

I would just like to follow up on this thread by announcing that the security-flaws detected by Preben has been successfully been removed in Easy CMS v1.3RC2.

regards,
Kim Steinhaug
www.easycms.no