PHPWebSite Multiple Input Validation Vulnerabilities
BID:11088
Info
PHPWebSite Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 11088 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-1655 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 01 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | Discovery of these vulnerabilities is credited to "GulfTech Security" <[email protected]>. |
| Vulnerable: |
phpWebsite phpWebsite 0.9.3 -4 phpWebsite phpWebsite 0.9.3 phpWebsite phpWebsite 0.8.3 phpWebsite phpWebsite 0.8.2 phpWebsite phpWebsite 0.7.3 |
| Not Vulnerable: | |
Discussion
PHPWebSite Multiple Input Validation Vulnerabilities
It is reported that phpWebSite is susceptible to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities.
The cross-site scripting issue is present in a parameter of the comments module script. An attacker can exploit these issues by creating a malicious link to the vulnerable module containing HTML and script code and send this link to a vulnerable user. When the user follows the link, the attacker-supplied code renders in the user's browser.
An SQL injection issue exists in the application as well. This issue affects a parameter of the calendar module script. This issue may be exploited to cause sensitive information to be disclosed to a remote attacker.
Finally, a HTML Injection vulnerability is reported to affect the application. The problem is said to occur in the notes module due to a lack of sufficient sanitization performed on user supplied data.
Attackers may potentially exploit this issue to manipulate web content, take unauthorized site actions in the context of the victim, or to steal cookie-based authentication credentials.
These vulnerabilities were reported in phpWebsite 0.9.3-4, previous versions are also reported to be vulnerable.
It is reported that phpWebSite is susceptible to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities.
The cross-site scripting issue is present in a parameter of the comments module script. An attacker can exploit these issues by creating a malicious link to the vulnerable module containing HTML and script code and send this link to a vulnerable user. When the user follows the link, the attacker-supplied code renders in the user's browser.
An SQL injection issue exists in the application as well. This issue affects a parameter of the calendar module script. This issue may be exploited to cause sensitive information to be disclosed to a remote attacker.
Finally, a HTML Injection vulnerability is reported to affect the application. The problem is said to occur in the notes module due to a lack of sufficient sanitization performed on user supplied data.
Attackers may potentially exploit this issue to manipulate web content, take unauthorized site actions in the context of the victim, or to steal cookie-based authentication credentials.
These vulnerabilities were reported in phpWebsite 0.9.3-4, previous versions are also reported to be vulnerable.
Exploit / POC
PHPWebSite Multiple Input Validation Vulnerabilities
No exploit is required, the following example is available:
/index.php?module=comments&CM_op=replyToComment&CM_pid=1[XSS]
No exploit is required, the following example is available:
/index.php?module=comments&CM_op=replyToComment&CM_pid=1[XSS]
Solution / Fix
PHPWebSite Multiple Input Validation Vulnerabilities
Solution:
The vendor has released an update to address these vulnerabilities:
phpWebsite phpWebsite 0.7.3
phpWebsite phpWebsite 0.8.2
phpWebsite phpWebsite 0.8.3
phpWebsite phpWebsite 0.9.3 -4
phpWebsite phpWebsite 0.9.3
Solution:
The vendor has released an update to address these vulnerabilities:
phpWebsite phpWebsite 0.7.3
-
phpWebsite phpwebsite-core-security-patch.tar.gz
http://www.phpwebsite.appstate.edu/downloads/security/phpwebsite-core- security-patch.tar.gz
phpWebsite phpWebsite 0.8.2
-
phpWebsite phpwebsite-core-security-patch.tar.gz
http://www.phpwebsite.appstate.edu/downloads/security/phpwebsite-core- security-patch.tar.gz
phpWebsite phpWebsite 0.8.3
-
phpWebsite phpwebsite-core-security-patch.tar.gz
http://www.phpwebsite.appstate.edu/downloads/security/phpwebsite-core- security-patch.tar.gz
phpWebsite phpWebsite 0.9.3 -4
-
phpWebsite phpwebsite-core-security-patch.tar.gz
http://www.phpwebsite.appstate.edu/downloads/security/phpwebsite-core- security-patch.tar.gz
phpWebsite phpWebsite 0.9.3
-
phpWebsite phpwebsite-core-security-patch.tar.gz
http://www.phpwebsite.appstate.edu/downloads/security/phpwebsite-core- security-patch.tar.gz
References
PHPWebSite Multiple Input Validation Vulnerabilities
References:
References:
- phpWebsite Homepage (phpWebsite)
- Multiple Vulnerabilities In phpWebsite ("GulfTech Security"