FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
BID:11407
Info
FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 11407 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2004 12:00AM |
| Updated: | Oct 13 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities is credited to "steven" <[email protected]>. |
| Vulnerable: |
FuseTalk Inc. FuseTalk 4.0 |
| Not Vulnerable: | |
Discussion
FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data.
The first issue is reported to exist because the software echoes unsanitized request data as part of an error page to the origin of the request. This makes it possible for an attacker to a construct a malicious link containing HTML or script code, the attacker-supplied code will be rendered as part of an error message if a target user follows the malicious URI link.
FuseTalk Forum is reported prone to an additional cross-site scripting vulnerability.
The problem presents itself when malicious HTML and script code is sent to the 'tombstone.cfm' script through a URI parameter.
This may allow for theft of cookie-based authentication credentials or other attacks.
FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data.
The first issue is reported to exist because the software echoes unsanitized request data as part of an error page to the origin of the request. This makes it possible for an attacker to a construct a malicious link containing HTML or script code, the attacker-supplied code will be rendered as part of an error message if a target user follows the malicious URI link.
FuseTalk Forum is reported prone to an additional cross-site scripting vulnerability.
The problem presents itself when malicious HTML and script code is sent to the 'tombstone.cfm' script through a URI parameter.
This may allow for theft of cookie-based authentication credentials or other attacks.
Exploit / POC
FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
The following examples are available:
www.example.com\tombstone.cfm?ProfileID=<script>alert(document.cookie)</script>
The following examples are available:
www.example.com\tombstone.cfm?ProfileID=<script>alert(document.cookie)</script>
Solution / Fix
FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
Solution:
It is reported that these issues are fixed by vendor updates that were released on 04/21/2004 and 05/04/2004, this is not confirmed. Customers are advised to contact the vendor for further details.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that these issues are fixed by vendor updates that were released on 04/21/2004 and 05/04/2004, this is not confirmed. Customers are advised to contact the vendor for further details.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- FuseTalk Homepage (FuseTalk Inc.)
- Multiple Cross Site Scripting Vulnerabilities in FuseTalk ("steven"