ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
BID:24895
Info
ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 24895 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3014 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2007 12:00AM |
| Updated: | Jul 13 2007 06:36PM |
| Credit: | RedTeam Pentesting is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Active Web Softwares contentserver 5.6.2929 |
| Not Vulnerable: | |
Discussion
ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
activeWeb contentserver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Reports indicate that versions prior to contentserver 5.6.2964 are vulnerable to this issue.
activeWeb contentserver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Reports indicate that versions prior to contentserver 5.6.2964 are vulnerable to this issue.
Exploit / POC
ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
Attackers may exploit these issues through a browser.
The following proofs of concept are available:
http://www.example.com/errors/rights.asp?awReadAccessRight=True&msg=<script>alert('XSS')</script>
http://www.example.com/errors/transaction.asp?msg=<script>alert('XSS')</script>
Attackers may exploit these issues through a browser.
The following proofs of concept are available:
http://www.example.com/errors/rights.asp?awReadAccessRight=True&msg=<script>alert('XSS')</script>
http://www.example.com/errors/transaction.asp?msg=<script>alert('XSS')</script>
Solution / Fix
ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
Solution:
Reports indicate that contentserver 5.6.2964 is not affected by these issues, but Symantec was unable to verify this information. Please contact the vendor for more information.
Solution:
Reports indicate that contentserver 5.6.2964 is not affected by these issues, but Symantec was unable to verify this information. Please contact the vendor for more information.
References
ActiveWeb Contentserver Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- ActiveWeb Contentserver CMS Multiple Cross Site Scriptings (RedTeam Pentesting GmbH)
- contentserver (activeWeb)
- ActiveWeb Contentserver CMS Multiple Cross Site Scriptings (RedTeam Pentesting GmbH)