Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
BID:15949
Info
Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
| Bugtraq ID: | 15949 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2005 12:00AM |
| Updated: | Jan 17 2006 10:10PM |
| Credit: | rakstija r0t3d3Vil is credited with the discovery of this vulnerability. |
| Vulnerable: |
Mindroute lemoon 2.0 Mindroute damoon |
| Not Vulnerable: | |
Discussion
Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
lemoon and damoon are prone to a cross-site scripting vulnerability. This issue is due to a failure in the applications to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Further information from the vendor states this issue does not affect lemoon or damoon directly, or sites utilizing the core elements of the software. This BID is being retired.
lemoon and damoon are prone to a cross-site scripting vulnerability. This issue is due to a failure in the applications to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Further information from the vendor states this issue does not affect lemoon or damoon directly, or sites utilizing the core elements of the software. This BID is being retired.
Exploit / POC
Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
Solution:
Further information from the vendor states this issue does not affect lemoon or damoon directly, or sites utilizing the core elements of the software. This BID is being retired.
Solution:
Further information from the vendor states this issue does not affect lemoon or damoon directly, or sites utilizing the core elements of the software. This BID is being retired.
References
Retired: Mindroute Lemoon/Damoon Search Module Cross-Site Scripting Vulnerability
References:
References:
- damoon Homepage (Mindroute)
- damoon XSS vuln (rakstija r0t3d3Vil)
- lemoon Homepage (Mindroute)
- lemoon® XSS vuln (rakstija r0t3d3Vil)