AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
BID:16351
Info
AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
| Bugtraq ID: | 16351 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 23 2006 12:00AM |
| Updated: | Mar 10 2006 07:35AM |
| Credit: | Roozbeh Afrasiabi is credited with the discovery of this vulnerability. |
| Vulnerable: |
AZ Bulletin Board AZbb 1.1 AZ Bulletin Board AZbb 1.0.8 AZ Bulletin Board AZbb 1.0.7 c AZ Bulletin Board AZbb 1.0.7 b AZ Bulletin Board AZbb 1.0.7 a AZ Bulletin Board AZbb 1.0.6 AZ Bulletin Board AZbb 1.0.5 AZ Bulletin Board AZbb 1.0.4 AZ Bulletin Board AZbb 1.0.3 AZ Bulletin Board AZbb 1.0.2 AZ Bulletin Board AZbb 1.0.1 AZ Bulletin Board AZbb 1.0 |
| Not Vulnerable: | |
Discussion
AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
AZbb is prone to HTML-injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
AZbb is prone to HTML-injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
An exploit is not required.
The following proof of concepts are available:
http://www.example.com/post.php?nickname="><script>alert('XSS')</script><!--
http://www.example.com/post.php?topic=>"<br><iframe%20src=javascript:alert()><br>"
An exploit is not required.
The following proof of concepts are available:
http://www.example.com/post.php?nickname="><script>alert('XSS')</script><!--
http://www.example.com/post.php?topic=>"<br><iframe%20src=javascript:alert()><br>"
Solution / Fix
AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
AZ Bulletin Board Post.PHP HTML Injection Vulnerabilities
References:
References: