WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability

Bugtraq ID:	16196
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 10 2006 12:00AM
Updated:	Jan 10 2006 12:00AM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	Nortel Networks VPN Router 1100 6.34
Not Vulnerable:	Nortel Networks VPN Router 1100 7.01

WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability

WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability

No exploit is required.

An example URI has been provided:

http://www.example.com/[webwizdir]/search_form.asp?ReturnPage=Search&search=XSS&searchMode=allwords&searchIn=Topic&forum=0&searchSort=dateDESC&SearchPagePosition=1

WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability

Solution:
The vendor has released version 7.01 to address this issue.


Nortel Networks VPN Router 1100 6.34

• WebWiz Forum web_wiz_forums_lite_v7.96.zip
  http://zap2.me.uk/?DL=web_wiz_forums_lite_v7.96.zip

WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability

References:

• WebWiz Forum Homepage (WebWiz Forum)
  
• WebWiz Forums Change Log (WebWiz Forums)