OSDate Multiple HTML Injection Vulnerabilities

Bugtraq ID:	19034
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 18 2006 12:00AM
Updated:	Aug 14 2006 11:35PM
Credit:	binaryloc is credited with the discovery of these vulnerabilities.
Vulnerable:	TUFaT OSDate 1.1.7
Not Vulnerable:	TUFaT OSDate 1.1.8

OSDate Multiple HTML Injection Vulnerabilities

osDate is prone to multiple HTML-injection vulnerabilities. These vulnerabilities occur because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

Version 1.1.7 is vulnerable; other versions may also be affected.

OSDate Multiple HTML Injection Vulnerabilities

Attackers can exploit this issue via a web client.

OSDate Multiple HTML Injection Vulnerabilities

Solution:
The vendor released version 1.1.8 to address this issue. Please see the referenced vendor change log for more information.

A third-party solution by binaryloc is available. Symantec has not verified the integrity of this update.

OSDate Multiple HTML Injection Vulnerabilities

References:

• binaryloc Home Page (binaryloc)
  
• osDate Changelog 1.1.8 (TuFat)
  
• osDate Homepage (osDate)
  
• osDate 1.1.7 multiple vulnerabilities ([email protected])
  
• osDate 1.1.8 - Multiple HTML Injection Vulnerability - fixed (Vijay)