Interact Online Learning Environment Interact Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	24573
Class:	Input Validation Error
CVE:	CVE-2007-3328
Remote:	Yes
Local:	No
Published:	Jun 21 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	r0t is credited with the discovery of these vulnerabilities.
Vulnerable:	Interact Learning Community Environment Interact 2.4 beta1
Not Vulnerable:

Interact Online Learning Environment Interact Multiple Cross Site Scripting Vulnerabilities

Interact is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.


These issues affect Interact 2.4 beta 1; other versions may also be affected.

Interact Online Learning Environment Interact Multiple Cross Site Scripting Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.

Interact Online Learning Environment Interact Multiple Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Interact Online Learning Environment Interact Multiple Cross Site Scripting Vulnerabilities

References:

• Interact Home Page (Interact Learning Community Environment)