ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
BID:10592
Info
ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
| Bugtraq ID: | 10592 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0617 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | Josh Gilmour <[email protected]> originally disclosed this vulnerability. |
| Vulnerable: |
ArbitroWeb ArbitroWeb 0.6 ArbitroWeb ArbitroWeb 0.5 |
| Not Vulnerable: | |
Discussion
ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
It is reported that ArbitroWeb is susceptible to a cross-site scripting vulnerability in its rawURL URI parameter.
The URI parameter passed to 'index.php' called 'rawURL' contains the desired target for the proxy to connect to. This parameter is improperly sanitized, and may be used in a cross-site scripting attack.
An attacker may craft a URI that contains malicious HTML or script code. If a victim user follows this link, the HTML contained in the affected URI parameter will be executed in the context of the vulnerable site.
The attacker could use this vulnerability to steal cookie-based authentication credentials, or perform other types of attacks.
It is reported that ArbitroWeb is susceptible to a cross-site scripting vulnerability in its rawURL URI parameter.
The URI parameter passed to 'index.php' called 'rawURL' contains the desired target for the proxy to connect to. This parameter is improperly sanitized, and may be used in a cross-site scripting attack.
An attacker may craft a URI that contains malicious HTML or script code. If a victim user follows this link, the HTML contained in the affected URI parameter will be executed in the context of the vulnerable site.
The attacker could use this vulnerability to steal cookie-based authentication credentials, or perform other types of attacks.
Exploit / POC
ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
No exploit is required. An example URI was provided:
http://www.example.com/?rawURL=&lt;script&gt;javascript:alert();&lt;/script&gt;
No exploit is required. An example URI was provided:
http://www.example.com/?rawURL=&lt;script&gt;javascript:alert();&lt;/script&gt;
Solution / Fix
ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ArbitroWeb PHP Proxy Cross-Site Scripting Vulnerability
References:
References:
- ArbitroWeb Product Home Page (ArbitroWeb)
- ArbitroWeb v0.6 Javascript injection vulnerability (Josh Gilmour