NuKed-Klan Messaging System HTML Injection Vulnerability
BID:11689
Info
NuKed-Klan Messaging System HTML Injection Vulnerability
| Bugtraq ID: | 11689 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2004 12:00AM |
| Updated: | Nov 16 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to "benji lemien" <[email protected]>. |
| Vulnerable: |
Nuked-Klan Nuked-Klan 1.5 SP2 Nuked-Klan Nuked-Klan 1.5 Nuked-Klan Nuked-Klan 1.4 Nuked-Klan Nuked-Klan 1.3 beta Nuked-Klan Nuked-Klan 1.3 Nuked-Klan Nuked-Klan 1.2 beta Nuked-Klan Nuked-Klan 1.2 |
| Not Vulnerable: | |
Discussion
NuKed-Klan Messaging System HTML Injection Vulnerability
NuKed-Klan messaging system is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on a certain input field of the NuKed-Klan messaging form.
Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may also be possible to take arbitrary actions as the victim user.
NuKed-Klan messaging system is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on a certain input field of the NuKed-Klan messaging form.
Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may also be possible to take arbitrary actions as the victim user.
Exploit / POC
NuKed-Klan Messaging System HTML Injection Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
NuKed-Klan Messaging System HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.