PunBB IMG Tag HTML Injection Vulnerability

Bugtraq ID:	11850
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 19 2003 12:00AM
Updated:	Aug 19 2003 12:00AM
Credit:	Discovery of this vulnerability is credited to frog-m@n <[email protected]>.
Vulnerable:	PunBB PunBB 1.0 RC2 PunBB PunBB 1.0 RC1 PunBB PunBB 1.0 _beta3 PunBB PunBB 1.0 _beta2 PunBB PunBB 1.0
Not Vulnerable:	PunBB PunBB 1.0.1

PunBB IMG Tag HTML Injection Vulnerability

PunBB is prone to an HTML injection vulnerability. This is because the script that processes posts does not sufficiently sanitize user input, allowing attackers to embed HTML and script commands within the post.

The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user.

PunBB IMG Tag HTML Injection Vulnerability

No exploit is required.

PunBB IMG Tag HTML Injection Vulnerability

Solution:
The vendor has supplied an updated version addressing this issue, PunBB 1.0.1.


PunBB PunBB 1.0 _beta2

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 RC1

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 RC2

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 _beta3

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB IMG Tag HTML Injection Vulnerability

References:

• Changelog 1.0 to 1.0.1 (PunBB)
  
• PunBB Homepage (PunBB)