I-Gallery Multiple Input Validation Vulnerabilities
BID:21122
Info
I-Gallery Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 21122 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2006 12:00AM |
| Updated: | Nov 20 2006 10:11PM |
| Credit: | Aria-Security Team is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Blue-Collar Production i-gallery 3.4 |
| Not Vulnerable: | |
Discussion
I-Gallery Multiple Input Validation Vulnerabilities
The i-gallery application is prone to multiple-input validation vulnerabilities, including multiple cross-site scripting vulnerabilities and an HTML-injection issue, because the software fails to sufficiently sanitize user-supplied data.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
This issue affects i-gallery 3.4 and prior versions.
The i-gallery application is prone to multiple-input validation vulnerabilities, including multiple cross-site scripting vulnerabilities and an HTML-injection issue, because the software fails to sufficiently sanitize user-supplied data.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
This issue affects i-gallery 3.4 and prior versions.
Exploit / POC
I-Gallery Multiple Input Validation Vulnerabilities
To exploit the HTML-injection issue, an attacker can use a web client. To exploit the cross-site scripting issues, the attacker must entice an unsuspected victim into following a malicious URI.
These proof-of-concept URIs are available:
http://target/path/igallery.asp?n=[XSS]
http://target/path/igallery.asp&d=[XSS]
To exploit the HTML-injection issue, an attacker can use a web client. To exploit the cross-site scripting issues, the attacker must entice an unsuspected victim into following a malicious URI.
These proof-of-concept URIs are available:
http://target/path/igallery.asp?n=[XSS]
http://target/path/igallery.asp&d=[XSS]
Solution / Fix
I-Gallery Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
I-Gallery Multiple Input Validation Vulnerabilities
References:
References:
- Blue-Collar Productions Home Page (Blue-Collar Productions)
- i-Gallery 3.4 Cross Site Scripting ( [email protected])