PHP Web Statistik Content Injection Vulnerabilities
BID:15603
Info
PHP Web Statistik Content Injection Vulnerabilities
| Bugtraq ID: | 15603 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2005 12:00AM |
| Updated: | Nov 28 2005 12:00AM |
| Credit: | Francesco Ongaro is credited with the discovery of this vulnerability. |
| Vulnerable: |
PHPWebStatistik PHPWebStatistik 1.4 |
| Not Vulnerable: | |
Discussion
PHP Web Statistik Content Injection Vulnerabilities
PHP Web Statistik is prone to multiple content injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The vulnerabilities could allow for HTML injection and cross-site scripting attacks.
An attacker may leverage these issues to have arbitrary script and HTML code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials, and also exploit these issues to control how the site is rendered to the user.
PHP Web Statistik is prone to multiple content injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The vulnerabilities could allow for HTML injection and cross-site scripting attacks.
An attacker may leverage these issues to have arbitrary script and HTML code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials, and also exploit these issues to control how the site is rendered to the user.
Exploit / POC
PHP Web Statistik Content Injection Vulnerabilities
No exploit is required.
Examples for cross-site scripting and HTML injection attacks have been provided:
http://www.example.com/stat.php?lastnumber=urlencoded%20text
curl -A Opera http://www.example.com/stat/pixel.php -e
?<a href=http://www.example.com>go-google</a>?
curl -A Opera http://www.example.com/stat/pixel.php -e
?<script>alert(123123);</script>?
No exploit is required.
Examples for cross-site scripting and HTML injection attacks have been provided:
http://www.example.com/stat.php?lastnumber=urlencoded%20text
curl -A Opera http://www.example.com/stat/pixel.php -e
?<a href=http://www.example.com>go-google</a>?
curl -A Opera http://www.example.com/stat/pixel.php -e
?<script>alert(123123);</script>?
Solution / Fix
PHP Web Statistik Content Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP Web Statistik Content Injection Vulnerabilities
References:
References:
- Php Web Statistik Multiple Vulnerabilities (Francesco Ongaro)
- PHP Web Statistik Web Site (PHP Web Statistik)