Ajax-Spell HTML Tag Script Injection Vulnerability
BID:13986
Info
Ajax-Spell HTML Tag Script Injection Vulnerability
| Bugtraq ID: | 13986 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2005 12:00AM |
| Updated: | Jun 16 2005 12:00AM |
| Credit: | Discovery is credited to Jake Olefsky. |
| Vulnerable: |
ajax-spell ajax-spell 1.7 ajax-spell ajax-spell 1.6 ajax-spell ajax-spell 1.5 ajax-spell ajax-spell 1.4 ajax-spell ajax-spell 1.3 ajax-spell ajax-spell 1.2 ajax-spell ajax-spell 1.1 |
| Not Vulnerable: |
ajax-spell ajax-spell 1.9 |
Discussion
Ajax-Spell HTML Tag Script Injection Vulnerability
ajax-spell is prone to a script injection vulnerability. This could permit an attacker to inject hostile HTML and script code into the session of a user of the Web site hosting the application.
Successful exploitation could let an attacker steal cookie-based authentication credentials or launch other attacks.
ajax-spell is prone to a script injection vulnerability. This could permit an attacker to inject hostile HTML and script code into the session of a user of the Web site hosting the application.
Successful exploitation could let an attacker steal cookie-based authentication credentials or launch other attacks.
Exploit / POC
Ajax-Spell HTML Tag Script Injection Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Ajax-Spell HTML Tag Script Injection Vulnerability
Solution:
Users are advised to upgrade to ajax-spell 1.9.
ajax-spell ajax-spell 1.1
ajax-spell ajax-spell 1.2
ajax-spell ajax-spell 1.3
ajax-spell ajax-spell 1.4
ajax-spell ajax-spell 1.5
ajax-spell ajax-spell 1.6
ajax-spell ajax-spell 1.7
Solution:
Users are advised to upgrade to ajax-spell 1.9.
ajax-spell ajax-spell 1.1
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.2
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.3
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.4
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.5
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.6
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
ajax-spell ajax-spell 1.7
-
ajax-spell ajax-spell 1.9
http://sourceforge.net/project/showfiles.php?group_id=141511&package_i d=155305
References
Ajax-Spell HTML Tag Script Injection Vulnerability
References:
References:
- ajax-spell 1.9 Release Notes (ajax-spell)
- ajax-spell Homepage (ajax-spell)