e107 Website System User.PHP HTML Injection Vulnerability
BID:10405
Info
e107 Website System User.PHP HTML Injection Vulnerability
| Bugtraq ID: | 10405 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2004 12:00AM |
| Updated: | May 24 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Chris Norton <[email protected]>. |
| Vulnerable: |
e107 e107 website system 0.603 e107 e107 website system 0.555 Beta e107 e107 website system 0.554 e107 e107 website system 0.545 e107 e107 website system 0.6 15a e107 e107 website system 0.6 15 e107 e107 website system 0.6 14 e107 e107 website system 0.6 13 e107 e107 website system 0.6 12 e107 e107 website system 0.6 11 e107 e107 website system 0.6 10 |
| Not Vulnerable: | |
Discussion
e107 Website System User.PHP HTML Injection Vulnerability
It is reported that e107 website system is prone to a remote HTML injection vulnerability in user account profiles. This issue is due to a failure by the application to properly sanitize user-supplied input.
An attacker may exploit the aforementioned vulnerability to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible.
It is reported that e107 website system is prone to a remote HTML injection vulnerability in user account profiles. This issue is due to a failure by the application to properly sanitize user-supplied input.
An attacker may exploit the aforementioned vulnerability to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible.
Exploit / POC
e107 Website System User.PHP HTML Injection Vulnerability
There is no exploit required; however the following example is available:
URL field:
http://www.example.com/<script>alert(document.cookie)</script>
AIM/MSN field: <script>alert(document.cookie)</script>
There is no exploit required; however the following example is available:
URL field:
http://www.example.com/<script>alert(document.cookie)</script>
AIM/MSN field: <script>alert(document.cookie)</script>
Solution / Fix
e107 Website System User.PHP HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
e107 Website System User.PHP HTML Injection Vulnerability
References:
References:
- e107 website system Homepage (e107.org)
- e107 web portal user.php XSS (Cross Site Scripting) (Chris Norton