Xhawk.net Discussion BBCode IMG Tag Script Injection Vulnerability

Bugtraq ID:	17119
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 15 2006 12:00AM
Updated:	Mar 16 2006 09:55PM
Credit:	Discovered by <[email protected]>.
Vulnerable:	xhawk.net discussion 2.0 beta2
Not Vulnerable:

Xhawk.net Discussion BBCode IMG Tag Script Injection Vulnerability

The 'discussion' package from xhawk.net is prone to a script-injection vulnerability.

An attacker can use BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for the theft of cookie-based authentication credentials. Other attacks are also possible.

Version 2.0 beta2 of 'discussion' is reportedly prone to this vulnerability.

Xhawk.net Discussion BBCode IMG Tag Script Injection Vulnerability

This issue may be exploited via a web client.

Xhawk.net Discussion BBCode IMG Tag Script Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Xhawk.net Discussion BBCode IMG Tag Script Injection Vulnerability

References:

• discussion (xhawk.net)
  
• [eVuln] discussion - xhawk.net BBCode 'img' XSS & SQL Injection Vulnerabilities ([email protected])