All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
BID:12157
Info
All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 12157 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 04 2005 12:00AM |
| Updated: | Mar 03 2011 04:18PM |
| Credit: | Discovery is credited to James Bercegay of the GulfTech Security Research Team. |
| Vulnerable: |
All Enthusiast Inc Photopost PHP Pro 4.8.1 All Enthusiast Inc Photopost PHP Pro 4.6 All Enthusiast Inc Photopost PHP Pro 4.1 All Enthusiast Inc Photopost PHP Pro 4.0 All Enthusiast Inc Photopost PHP Pro 3.3 All Enthusiast Inc Photopost PHP Pro 3.2 All Enthusiast Inc Photopost PHP Pro 3.1 All Enthusiast Inc PhotoPost PHP 4.8c |
| Not Vulnerable: | |
Discussion
All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
PhotoPost PHP Pro is reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated content.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based authentication credentials as well as other attacks.
PhotoPost PHP Pro 4.8.1 is reported prone to these issues, however, it is likely that other versions are affected as well.
PhotoPost PHP Pro is reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated content.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based authentication credentials as well as other attacks.
PhotoPost PHP Pro 4.8.1 is reported prone to these issues, however, it is likely that other versions are affected as well.
Exploit / POC
All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URIs are available:
http://www.example.com/showgallery.php?cat=[INT]&page=[XSS]
http://www.example.com/showgallery.php?si=[XSS]
http://www.example.com/showgallery.php?cat=[INT][XSS]
http://www.example.com/showgallery.php?ppuser=[INT]&cat=[INT][XSS]
Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URIs are available:
http://www.example.com/showgallery.php?cat=[INT]&page=[XSS]
http://www.example.com/showgallery.php?si=[XSS]
http://www.example.com/showgallery.php?cat=[INT][XSS]
http://www.example.com/showgallery.php?ppuser=[INT]&cat=[INT][XSS]
Solution / Fix
All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
Solution:
It is reported that PhotoPost PHP Pro 4.86 has been released to address these issues. Please contact the vendor for more information and to obtain the fixed version.
Solution:
It is reported that PhotoPost PHP Pro 4.86 has been released to address these issues. Please contact the vendor for more information and to obtain the fixed version.
References
All Enthusiast PhotoPost PHP Pro Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- PhotoPost PHP Homepage (All Enthusiast Inc)
- PhotoPost PHP 4.8c (showgallery.php) Cross Site Scripting (Root)