Access2ASP Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	24610
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 25 2007 12:00AM
Updated:	Jun 25 2007 10:18PM
Credit:	r0t is credited with the discovery of these vulnerabilities.
Vulnerable:	access2asp access2asp 4.5
Not Vulnerable:

Access2ASP Multiple Cross Site Scripting Vulnerabilities

The 'access2asp' program is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

This issue affects access2asp 4.5 and prior versions.

Access2ASP Multiple Cross Site Scripting Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.

Access2ASP Multiple Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Access2ASP Multiple Cross Site Scripting Vulnerabilities

References:

• Access2ASP Home Page (Access2ASP )