12Planet Chat Server Cross-Site Scripting Vulnerability
BID:10659
Info
12Planet Chat Server Cross-Site Scripting Vulnerability
| Bugtraq ID: | 10659 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0678 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 05 2004 12:00AM |
| Updated: | Jul 12 2009 06:16AM |
| Credit: | "Donato Ferrante" <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
SGI ProPack 3.0 12Planet Chat Server 2.9 |
| Not Vulnerable: | |
Discussion
12Planet Chat Server Cross-Site Scripting Vulnerability
It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data.
The problem presents itself when malicious HTML or script code is passed in a URI argument to one of the servlets in the application.
A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed by an unsuspecting user, the hostile code may be rendered in the their web browser. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.
Although version 2.9 of the software was reported vulnerable, other versions may also be affected.
It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data.
The problem presents itself when malicious HTML or script code is passed in a URI argument to one of the servlets in the application.
A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed by an unsuspecting user, the hostile code may be rendered in the their web browser. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.
Although version 2.9 of the software was reported vulnerable, other versions may also be affected.
Exploit / POC
12Planet Chat Server Cross-Site Scripting Vulnerability
No exploit is required. An example URI has been provided:
http://www.example.com:8080/servlet/one2planet.infolet.InfoServlet?page=<script>alert("hy")</script>
No exploit is required. An example URI has been provided:
http://www.example.com:8080/servlet/one2planet.infolet.InfoServlet?page=<script>alert("hy")</script>
Solution / Fix
12Planet Chat Server Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
12Planet Chat Server Cross-Site Scripting Vulnerability
References:
References:
- Chat Server Product Page (12Planet)
- XSS in 12Planet Chat Server 2.9 ("Donato Ferrante"