Guestserver HTML Injection Vulnerability
BID:12232
Info
Guestserver HTML Injection Vulnerability
| Bugtraq ID: | 12232 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2005 12:00AM |
| Updated: | Jan 11 2005 12:00AM |
| Credit: | Discovery of this vulnerability is credited to SmOk3 <[email protected]>. |
| Vulnerable: |
Lars Ellingsen Guestserver 5.0 |
| Not Vulnerable: | |
Discussion
Guestserver HTML Injection Vulnerability
Guestserver is reportedly vulnerable to an HTML injection vulnerability. This is due to the application failing to properly sanitize user-supplied input.
The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user, other attacks are also possible.
Guestserver is reportedly vulnerable to an HTML injection vulnerability. This is due to the application failing to properly sanitize user-supplied input.
The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user, other attacks are also possible.
Exploit / POC
Guestserver HTML Injection Vulnerability
No exploit is required.
The following proof of concept was provided by the discoverer of this vulnerability. They conjecture that supplying the following code excerpt to the message field would cause erroneous data to be displayed on the main page:
<iframe src="http://www.example.com" width="800px" height="600px" scrolling="no"></iframe>
No exploit is required.
The following proof of concept was provided by the discoverer of this vulnerability. They conjecture that supplying the following code excerpt to the message field would cause erroneous data to be displayed on the main page:
<iframe src="http://www.example.com" width="800px" height="600px" scrolling="no"></iframe>
Solution / Fix
Guestserver HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Guestserver HTML Injection Vulnerability
References:
References:
- Guestserver Homepage (Lars Ellingsen)
- Guestserver Version 5 Advisory (SystemSecure.org)