CmScout Multiple HTML Injection Vulnerabilities

Bugtraq ID:	17796
Class:	Input Validation Error
CVE:	CVE-2006-2188
Remote:	Yes
Local:	No
Published:	May 02 2006 12:00AM
Updated:	Jul 27 2006 11:17PM
Credit:	Nomenumbra is credited with the discovery of this vulnerability.
Vulnerable:	CMScout CMScout 1.10
Not Vulnerable:	CMScout CMScout 1.21

CmScout Multiple HTML Injection Vulnerabilities

CmScout is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Versions 1.10 and prior are vulnerable; other versions may also be affected.

CmScout Multiple HTML Injection Vulnerabilities

Attackers can exploit this issue via a web client.

CmScout Multiple HTML Injection Vulnerabilities

Solution:
The vendor has released version 1.21 to address these issues.


CMScout CMScout 1.10

• CMScout cmscout1.21.zip
  http://www.cmscout.za.net/index.php?page=downloads&id=36&action=down&c atid=1

CmScout Multiple HTML Injection Vulnerabilities

References:

• CMScout Homepage (CMScout)
  
• Critical Update (CMScout)
  
• Cmscout <= V1.10 multiple XSS attack vectors ([email protected])