freeForum Multiple HTML Injection Vulnerabilities

Bugtraq ID:	16877
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2006 12:00AM
Updated:	Dec 13 2006 06:18PM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities.
Vulnerable:	freeForum freeForum 1.2
Not Vulnerable:	freeForum freeForum 1.2.1

freeForum Multiple HTML Injection Vulnerabilities

The freeForum script is prone to multiple HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Version 1.2 of freeForum is vulnerable; other versions may also be affected.

freeForum Multiple HTML Injection Vulnerabilities

This issue can be exploited through use of a web client.

freeForum Multiple HTML Injection Vulnerabilities

Solution:
The vendor has released version 1.2.1 to address these issues.


freeForum freeForum 1.2

• freeForum freeforum-1.2.1.tgz
  http://soft.zoneo.net/freeForum/Files/get.php?freeforum-1.2.1.tgz

freeForum Multiple HTML Injection Vulnerabilities

References:

• freeForum Home Page (freeForum)
  
• FreeForum PHP Code Execution & Multiple XSS Vulnerabilities (eVuln.com)