PHP-Fusion Avatar Image Edit_profile.PHP HTML Injection Vulnerability

Bugtraq ID:	18787
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 03 2006 12:00AM
Updated:	Jul 05 2006 03:49PM
Credit:	zeberus_is credited with the discovery of this vulnerability.
Vulnerable:	PHP-Fusion PHP-Fusion 6.0.307 PHP-Fusion PHP-Fusion 6.0.204 PHP-Fusion PHP-Fusion 6.0.110 PHP-Fusion PHP-Fusion 6.0.109 PHP-Fusion PHP-Fusion 6.0.107 PHP-Fusion PHP-Fusion 6.0.105 PHP-Fusion PHP-Fusion 6.0 306 PHP-Fusion PHP-Fusion 6.0 304 PHP-Fusion PHP-Fusion 6.0 303 PHP-Fusion PHP-Fusion 6.0 0.3 PHP-Fusion PHP-Fusion 6.0 .206 PHP-Fusion PHP-Fusion 6.0 .106 PHP-Fusion PHP-Fusion 5.0 1 Service Pack PHP-Fusion PHP-Fusion 5.0 PHP-Fusion PHP-Fusion 4.0 1 PHP-Fusion PHP-Fusion 4.00
Not Vulnerable:

PHP-Fusion Avatar Image Edit_profile.PHP HTML Injection Vulnerability

PHP-Fusion is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content.

If an attack is successful, attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

PHP-Fusion Avatar Image Edit_profile.PHP HTML Injection Vulnerability

An exploit is not required.

PHP-Fusion Avatar Image Edit_profile.PHP HTML Injection Vulnerability

Solution:
The vendor has released version 2.7.10 to address this issue; please see the references for more information.

PHP-Fusion Avatar Image Edit_profile.PHP HTML Injection Vulnerability

References:

• PHP-Fusion Homepage (PHP-Fusion)
  
• Php-Fusion (Xss) With Avatar Upload ([email protected])