BNBT EasyTracker Cross-Site Scripting Vulnerabilities

Bugtraq ID:	18617
Class:	Input Validation Error
CVE:	CVE-2006-3258
Remote:	Yes
Local:	No
Published:	Jun 23 2006 12:00AM
Updated:	Jul 06 2016 01:33PM
Credit:	This vulnerability was discovered by r0t.
Vulnerable:	Trevor Hogan BNBT 7.7 r3.2004.10.27
Not Vulnerable:

BNBT EasyTracker Cross-Site Scripting Vulnerabilities

BNBT EasyTracker is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BNBT EasyTracker Cross-Site Scripting Vulnerabilities

No exploit is required. This issue can be exploited through a web client.

BNBT EasyTracker Cross-Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. This product is reportedly no longer maintained; patches or upgrades may not be available.

If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

BNBT EasyTracker Cross-Site Scripting Vulnerabilities

References:

• BNBT Homepage (Trevor Hogan)
  
• BNBT TrinEdit vulnerability (r0t)