Keene Digital Media Server Cross-Site Scripting Vulnerabilities
BID:11111
Info
Keene Digital Media Server Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 11111 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 04 2004 12:00AM |
| Updated: | Sep 04 2004 12:00AM |
| Credit: | Discovery is credited to dr_insane. |
| Vulnerable: |
Keene Digital Media Server 1.0.2 |
| Not Vulnerable: | |
Discussion
Keene Digital Media Server Cross-Site Scripting Vulnerabilities
Keene Digital Media Server is prone to multiple cross-site scripting vulnerabilities. These issues span multiple scripts. The source of the problem is that affected scripts do not sufficiently sanitize externally supplied data before rendering it to a client user. An attacker may exploit these issues by enticing a victim user to follow a malicious link.
These issues could be exploited to steal cookie-based authentication credentials or launch other attacks.
Keene Digital Media Server is prone to multiple cross-site scripting vulnerabilities. These issues span multiple scripts. The source of the problem is that affected scripts do not sufficiently sanitize externally supplied data before rendering it to a client user. An attacker may exploit these issues by enticing a victim user to follow a malicious link.
These issues could be exploited to steal cookie-based authentication credentials or launch other attacks.
Exploit / POC
Keene Digital Media Server Cross-Site Scripting Vulnerabilities
The following examples were submitted:
http://www.example.com/dms/slideshow.kspx?shidx=0&idx=-1&sort=d&style=t&delay=15&playmode=play&source=[code]
http://www.example.com/dms/slideshow.kspx?source=[code]
http://www.example.com/dms/dlasx.kspx?shidx=[code]
http://www.example.com/igen/?pg=dlasx.kspx&shidx=[code]
http://www.example.com/dms/mediashowplay.kspx?pic=[code]&idx=0
http://www.example.com/dms/mediashowplay.kspx?pic=0&idx=[code]
The following examples were submitted:
http://www.example.com/dms/slideshow.kspx?shidx=0&idx=-1&sort=d&style=t&delay=15&playmode=play&source=[code]
http://www.example.com/dms/slideshow.kspx?source=[code]
http://www.example.com/dms/dlasx.kspx?shidx=[code]
http://www.example.com/igen/?pg=dlasx.kspx&shidx=[code]
http://www.example.com/dms/mediashowplay.kspx?pic=[code]&idx=0
http://www.example.com/dms/mediashowplay.kspx?pic=0&idx=[code]
Solution / Fix
Keene Digital Media Server Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Keene Digital Media Server Cross-Site Scripting Vulnerabilities
References:
References:
- Digital Media Server Home Page (Keene)