InShop and InMail Cross-Site Scripting Vulnerabilities
BID:11758
Info
InShop and InMail Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 11758 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 25 2004 12:00AM |
| Updated: | Nov 25 2004 12:00AM |
| Credit: | Carlos Ulver <[email protected]> disclosed these vulnerabilities. |
| Vulnerable: |
Insite InShop Insite InMail |
| Not Vulnerable: | |
Discussion
InShop and InMail Cross-Site Scripting Vulnerabilities
InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including it in dynamic Web pages.
These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.
InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including it in dynamic Web pages.
These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.
Exploit / POC
InShop and InMail Cross-Site Scripting Vulnerabilities
Example URIs sufficient to exploit these vulnerabilities have been provided:
http://www.example.com/mod_perl/inmail.pl?acao=<<h1>opss!</h1>
http://www.example.com/mod_perl/inshop.pl?screen=<script>alert(document.cookie);</script>
Example URIs sufficient to exploit these vulnerabilities have been provided:
http://www.example.com/mod_perl/inmail.pl?acao=<<h1>opss!</h1>
http://www.example.com/mod_perl/inshop.pl?screen=<script>alert(document.cookie);</script>
Solution / Fix
InShop and InMail Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
InShop and InMail Cross-Site Scripting Vulnerabilities
References:
References:
- InMail Home Page (Insite)
- InShop Home Page (Insite)
- XSS in Brazilian Insite products (Carlos Ulver