Inside Systems Mail Error.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	21424
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 04 2006 12:00AM
Updated:	Dec 04 2006 09:54PM
Credit:	Vicente Aguilera Diaz is credited with the discovery of this vulnerability.
Vulnerable:	Inside Systems Inside Systems Mail 2.0
Not Vulnerable:	Inside Systems Inside Systems Mail 2.1

Inside Systems Mail Error.PHP Cross-Site Scripting Vulnerability

Inside Systems Mail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.0 is vulnerable; other versions may also be affected.

Inside Systems Mail Error.PHP Cross-Site Scripting Vulnerability

An attacker can exploit this issue with a web client.

The following proof-of-concept URI is available:

http://www.example.com/<path_to_ismail>/error.php?error=XSS%20attack%3Cscript%3Ealert(document.cookie);%3C/script%3E

Inside Systems Mail Error.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor has released version 2.1 to address this issue. Please see the references section for further information.


Inside Systems Inside Systems Mail 2.0

• Inside Systems ismail-2.1.tar.gz
  ftp://ftp.insidesystems.net/ismail/ismail-2.1.tar.gz

Inside Systems Mail Error.PHP Cross-Site Scripting Vulnerability

References:

• Product Homepage (Inside Systems)
  
• XSS vulnerability in error page of ISMail (ISecAuditors Security Advisories)