Ansel Multiple Input Validation Vulnerabilities

Bugtraq ID:	11824
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 06 2004 12:00AM
Updated:	Dec 06 2004 12:00AM
Credit:	Discovery of these vulnerabilities is credited to Secunia Research.
Vulnerable:	Ansel Ansel 2.1 Ansel Ansel 2.0 Ansel Ansel 1.4 Ansel Ansel 1.3 Ansel Ansel 1.2 Ansel Ansel 1.1 Ansel Ansel 1.0
Not Vulnerable:	Ansel Ansel 2.2

Ansel Multiple Input Validation Vulnerabilities

It is reported that Ansel is susceptible to cross-site scripting and SQL injection vulnerabilities.

The cross-site scripting issue is present in the 'album name' parameter of the Ansel application. An attacker can exploit this issue by creating a malicious link containing HTML and script code and send this link to a vulnerable user.

An SQL injection issue exists in the application as well. This issue affects the 'image' parameter of the Ansel application. Due to this, attackers may supply malicious parameters to manipulate the structure and logic of SQL queries.

Ansel Multiple Input Validation Vulnerabilities

No exploit is required.

Ansel Multiple Input Validation Vulnerabilities

Solution:
The vendor has released an update to address these issues:


Ansel Ansel 1.0

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 1.1

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 1.2

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 1.3

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 1.4

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 2.0

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Ansel 2.1

• Ansel ansel-2.2.tar.gz
  ftp://heron.sdsc.edu/pub/ansel-2.2.tar.gz

Ansel Multiple Input Validation Vulnerabilities

References:

• Ansel Homepage (Ansel)