Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
BID:17630
Info
Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
| Bugtraq ID: | 17630 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 20 2006 12:00AM |
| Updated: | Apr 20 2006 09:26PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability. |
| Vulnerable: |
Manic Web MWGuest 2.1 |
| Not Vulnerable: | |
Discussion
Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
MWGuest is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Version 2.1.0 is vulnerable. Prior versions may be vulnerable as well.
MWGuest is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
Version 2.1.0 is vulnerable. Prior versions may be vulnerable as well.
Exploit / POC
Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
This issue can be exploited through a web client.
A sample exploit has been provided:
URL: http://www.example.com/mwguest/mwguest.php
Homepage: ">[XSS]<aaa aaa="
This issue can be exploited through a web client.
A sample exploit has been provided:
URL: http://www.example.com/mwguest/mwguest.php
Homepage: ">[XSS]<aaa aaa="
Solution / Fix
Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Manic Web MWGuest MWguest.PHP HTML Injection Vulnerability
References:
References:
- MWGuest Web Site (Manic Web)
- MWGuest XSS Vulnerability (eVuln.com)