DCP Portal Multiple Input Validation Vulnerabilities
BID:16232
Info
DCP Portal Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16232 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2006 12:00AM |
| Updated: | Jan 13 2006 12:00AM |
| Credit: | Night_Warrior is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
DCP-Portal DCP-Portal 6.1.1 DCP-Portal DCP-Portal 6.1 DCP-Portal DCP-Portal 6.0 DCP-Portal DCP-Portal 5.3.2 DCP-Portal DCP-Portal 5.3.1 DCP-Portal DCP-Portal 5.3 |
| Not Vulnerable: | |
Discussion
DCP Portal Multiple Input Validation Vulnerabilities
DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
For the cross-site scripting vulnerability, an attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.
For the HTML injection vulnerability, ttacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
For the cross-site scripting vulnerability, an attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.
For the HTML injection vulnerability, ttacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
DCP Portal Multiple Input Validation Vulnerabilities
An exploit is not required.
Example URI have been provided:
http://www.example.com/calendar.php?show=full_month&s=1&submit=GO&day=[XSS]
http://www.example.com/search.php post this code <script>alert('night_warrior');</script>
An exploit is not required.
Example URI have been provided:
http://www.example.com/calendar.php?show=full_month&s=1&submit=GO&day=[XSS]
http://www.example.com/search.php post this code <script>alert('night_warrior');</script>
Solution / Fix
DCP Portal Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
DCP Portal Multiple Input Validation Vulnerabilities
References:
References: