DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
BID:11338
Info
DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 11338 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2004 12:00AM |
| Updated: | Oct 06 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to "Alexander Antipov" <[email protected]>. |
| Vulnerable: |
DCP-Portal DCP-Portal 5.3.2 DCP-Portal DCP-Portal 5.3.1 DCP-Portal DCP-Portal 5.3 DCP-Portal DCP-Portal 5.2 DCP-Portal DCP-Portal 5.1 DCP-Portal DCP-Portal 5.0.2 DCP-Portal DCP-Portal 5.0.1 DCP-Portal DCP-Portal 4.5.1 DCP-Portal DCP-Portal 4.2 DCP-Portal DCP-Portal 4.1 DCP-Portal DCP-Portal 4.0 DCP-Portal DCP-Portal 3.7 |
| Not Vulnerable: | |
Discussion
DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
This may allow for theft of cookie-based authentication credentials and other attacks.
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
This may allow for theft of cookie-based authentication credentials and other attacks.
Exploit / POC
DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
The following examples are vailable:
http://www.example.com/calendar.php?year=2004&month=[XSS code here]&day=01
http://www.example.com/calendar.php?year=2004&month=09&day=[XSS code here]
http://www.example.com/index.php?page=annoucements&cid=[XSS code here]
http://www.example.com/annoucement.php?aid=8&cid=[XSS code here]
http://www.example.com/news.php?nid=34&cid=[XSS code here]
http://www.example.com/contents.php?cid=[XSS code here]
http://www.example.com/index.php?cid=[XSS code here]
The following examples are vailable:
http://www.example.com/calendar.php?year=2004&month=[XSS code here]&day=01
http://www.example.com/calendar.php?year=2004&month=09&day=[XSS code here]
http://www.example.com/index.php?page=annoucements&cid=[XSS code here]
http://www.example.com/annoucement.php?aid=8&cid=[XSS code here]
http://www.example.com/news.php?nid=34&cid=[XSS code here]
http://www.example.com/contents.php?cid=[XSS code here]
http://www.example.com/index.php?cid=[XSS code here]
Solution / Fix
DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
DCP-Portal Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- DCP-Portal Homepage (DCP-Portal)
- [Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal ("Alexander Antipov"