Crafty Syntax Live Help Multiple HTML Injection Vulnerabilities

Bugtraq ID:	10463
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 04 2004 12:00AM
Updated:	Jun 04 2004 12:00AM
Credit:	Discovery is credited to HNK Technology Solutions.
Vulnerable:	Crafty Syntax Live Help Crafty Syntax Live Help 2.7.3
Not Vulnerable:	Crafty Syntax Live Help Crafty Syntax Live Help 2.7.4

Crafty Syntax Live Help Multiple HTML Injection Vulnerabilities

CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML code into the name field and in chat sessions for live help.

Crafy Syntax Live Help 2.7.3 and prior versions are prone to these issues.

Crafty Syntax Live Help Multiple HTML Injection Vulnerabilities

No exploit is required.

The following proof of concept examples are available:
window.location("http://www.cgisecurity.com/articles/xss-faq.shtml");
window.location("http://livehelp.someisp.com/livehelp/operators.php?remove=1")

Crafty Syntax Live Help Multiple HTML Injection Vulnerabilities

Solution:
Crafy Syntax Live Help 2.7.4 is available to address this issue:


Crafty Syntax Live Help Crafty Syntax Live Help 2.7.3

• Crafty Syntax Live Help CSLHv2.7.4.tar.gz
  http://prdownloads.sourceforge.net/cslive/CSLHv2.7.4.tar.gz?download