PHPKit Multiple HTML Injection Vulnerabilities

Bugtraq ID:	10013
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 30 2004 12:00AM
Updated:	Mar 30 2004 12:00AM
Credit:	Disclosure of these issues is credited to Yanosz <[email protected]>.
Vulnerable:	PHPKIT PHPKIT 1.6 .03
Not Vulnerable:

PHPKit Multiple HTML Injection Vulnerabilities

It has been reported that PHPKIT is prone to multiple HTML injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input.

An attacker may exploit the aforementioned vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible.

PHPKit Multiple HTML Injection Vulnerabilities

No exploit is required to leverage this issue.

PHPKit Multiple HTML Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHPKit Multiple HTML Injection Vulnerabilities

References:

• PHPKIT Homepage (PHPKIT)
  
• phpkit suffers (reale stupid) XSS vuln. (Yanosz )