2z Project Rating.PHP Cross Site Scripting Vulnerability

Bugtraq ID:	24122
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2007 12:00AM
Updated:	May 24 2007 03:57PM
Credit:	Janek Vind is credited with discovering this issue.
Vulnerable:	2z Project 2z Project 0.9.5
Not Vulnerable:

2z Project Rating.PHP Cross Site Scripting Vulnerability

2z Project is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

2z Project 0.9.5 is reported vulnerable; other versions may also be affected.

2z Project Rating.PHP Cross Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

The following proof-of-concept URI is available:

http://www.example.com/2zcms/?category=none&altname=testnews&rating=xxx

2z Project Rating.PHP Cross Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

2z Project Rating.PHP Cross Site Scripting Vulnerability

References:

• 2z Project Homepage (2z Project)
  
• [waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5 ([email protected])