Description: Some vulnerabilities have been reported in IMP, which can be exploited by malicious people to conduct cross-site scripting attacks.
1) An input validation error in the processing of mails in thread.php where the "Subject" header is not properly sanitised before being displayed can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site via a specially crafted mail.
2) Input passed to the "edit_query" parameter and other unspecified parameters in search.php is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Successful exploitation requires that the target user is logged in.
The vulnerabilities are reported in version 4.1.3. Prior versions may also be affected.
Solution: Update to version 4.1.4.
Provided and/or discovered by: Immerda Project Group and Moritz Naumann
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
