SCI Photo Chat Server Cross-Site Scripting Vulnerability
BID:10648
Info
SCI Photo Chat Server Cross-Site Scripting Vulnerability
| Bugtraq ID: | 10648 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0673 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | "Donato Ferrante" <[email protected]> disclosed this issue. |
| Vulnerable: |
SIMM-Comm SCI Photo Chat 3.4.9 |
| Not Vulnerable: | |
Discussion
SCI Photo Chat Server Cross-Site Scripting Vulnerability
SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
The web server component of SCI Chat server will display an error message when it receives an HTTP request for an invalid file. This error message includes the complete unsanitized content of the original request.
A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed by an unsuspecting user, the hostile code may be rendered in the their web browser. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.
SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
The web server component of SCI Chat server will display an error message when it receives an HTTP request for an invalid file. This error message includes the complete unsanitized content of the original request.
A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed by an unsuspecting user, the hostile code may be rendered in the their web browser. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.
Exploit / POC
SCI Photo Chat Server Cross-Site Scripting Vulnerability
No exploit is required.
An example URI was provided:
http://www.example.com:1235/<script>alert(document.cookie);</script>
No exploit is required.
An example URI was provided:
http://www.example.com:1235/<script>alert(document.cookie);</script>
Solution / Fix
SCI Photo Chat Server Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SCI Photo Chat Server Cross-Site Scripting Vulnerability
References:
References:
- SCI Photo Chat Home Page (SIMM-Comm)
- XSS in SCI Photo Chat Server 3.4.9 ("Donato Ferrante"