Sympa New List HTML Injection Vulnerability
BID:10992
Info
Sympa New List HTML Injection Vulnerability
| Bugtraq ID: | 10992 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 21 2004 12:00AM |
| Updated: | Aug 21 2004 12:00AM |
| Credit: | Jose Antonio <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Sympa Sympa 4.1.2 Sympa Sympa 4.1.1 Sympa Sympa 4.1 Sympa Sympa 4.0 .x |
| Not Vulnerable: | |
Discussion
Sympa New List HTML Injection Vulnerability
An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data.
Unsuspecting users viewing the affected page will have attacker-supplied malicious code interpreted by their browser in the security context of the website hosting Sympa.
Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.
Versions 4.1, and all 4.1.x releases are reported vulnerable to this issue.
An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data.
Unsuspecting users viewing the affected page will have attacker-supplied malicious code interpreted by their browser in the security context of the website hosting Sympa.
Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.
Versions 4.1, and all 4.1.x releases are reported vulnerable to this issue.
Exploit / POC
Sympa New List HTML Injection Vulnerability
An exploit is not required. Example input data for the 'Description' field was provided:
Whatever_you_want<script>alert("Your cookie is " + document.cookie)</script>
An exploit is not required. Example input data for the 'Description' field was provided:
Whatever_you_want<script>alert("Your cookie is " + document.cookie)</script>
Solution / Fix
Sympa New List HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Sympa New List HTML Injection Vulnerability
References:
References:
- Bug 327 - Multiple Cross Site Scripting Vulnerabilities (Sympa)
- Sympa Home Page (Sympa)
- Cross Site Scripting Vulnerability in Sympa (Jose Antonio