My Blog BBCode HTML Injection Vulnerability
BID:16659
Info
My Blog BBCode HTML Injection Vulnerability
| Bugtraq ID: | 16659 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2006 12:00AM |
| Updated: | Feb 15 2006 06:12PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability. |
| Vulnerable: |
M. Blom HTML-BBCode 1.04 M. Blom HTML-BBCode 1.03 FuzzyMonkey My Blog 1.63 |
| Not Vulnerable: |
M. Blom HTML-BBCode 1.05 FuzzyMonkey My Blog 1.65 |
Discussion
My Blog BBCode HTML Injection Vulnerability
My Blog is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected site, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
My Blog is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected site, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
My Blog BBCode HTML Injection Vulnerability
An exploit is not required.
Examples have been provided:
[img]javascript:alert(123)[/img]
[url=javascript:alert(123)]Click me[/url]
An exploit is not required.
Examples have been provided:
[img]javascript:alert(123)[/img]
[url=javascript:alert(123)]Click me[/url]
Solution / Fix
My Blog BBCode HTML Injection Vulnerability
Solution:
M. Blom, author of the HTML::BBCode Perl module, has released version 1.05 to address this issue. Fuzzy Monkey, the author of My Blog, has released version 1.65 to address this issue.
FuzzyMonkey My Blog 1.63
M. Blom HTML-BBCode 1.04
M. Blom HTML-BBCode 1.03
Solution:
M. Blom, author of the HTML::BBCode Perl module, has released version 1.05 to address this issue. Fuzzy Monkey, the author of My Blog, has released version 1.65 to address this issue.
FuzzyMonkey My Blog 1.63
-
FuzzyMonkey blog-1.65.tar.gz
http://www.fuzzymonkey.net/files/blog-1.65.tar.gz
M. Blom HTML-BBCode 1.04
-
M. Blom HTML-BBCode-1.05.tar.gz
http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz
M. Blom HTML-BBCode 1.03
-
M. Blom HTML-BBCode-1.05.tar.gz
http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz
References
My Blog BBCode HTML Injection Vulnerability
References:
References:
- My Blog BBCode XSS Vulnerabilities (eVuln.com)
- HTML::BBCode perl module XSS Vulnerabilities (eVuln.com)
- My Blog ReadMe Page (FuzzyMonkey)
- Product page (FuzzyMonkey)
- [eVuln] M. Blom HTML::BBCode perl module XSS Vulnerabilities (evuln.com)
- My Blog BBCode XSS Vulnerabilities ([email protected])