AllWebScripts MySQLGuest HTML Injection Vulnerability

Bugtraq ID:	11234
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 22 2004 12:00AM
Updated:	Sep 22 2004 12:00AM
Credit:	Disclosure of this issue is credited to BliZZard.
Vulnerable:	AllWebScripts MySQLGuest
Not Vulnerable:

AllWebScripts MySQLGuest HTML Injection Vulnerability

AllWebScripts MySQLGuest is reportedly affected by a remote HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input fields.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user, facilitating theft of cookie based authentication credentials as well as other attacks.

AllWebScripts MySQLGuest HTML Injection Vulnerability

No exploit is required to leverage this issue.

AllWebScripts MySQLGuest HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AllWebScripts MySQLGuest HTML Injection Vulnerability

References:

• MySQLGuest Home Page (AllWebScripts)