BosDev BosMarket Multiple HTML Injection Vulnerabilities
BID:26197
Info
BosDev BosMarket Multiple HTML Injection Vulnerabilities
| Bugtraq ID: | 26197 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-5833 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2007 12:00AM |
| Updated: | Nov 15 2007 12:35AM |
| Credit: | [email protected] is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
BosDev BosMarket 0 |
| Not Vulnerable: | |
Discussion
BosDev BosMarket Multiple HTML Injection Vulnerabilities
BosDev BosMarket is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.
UPDATE (November 13, 2007): The vendor states that the issue affecting the 'username' parameter is being addressed in BosMarket 6.1. The vendor refutes claims that other parameters are affected, stating that HTML code is stripped with the exception of certain parameters that will accept HTML only if the user has administrator privileges. Please see the references for more information.
BosDev BosMarket is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.
UPDATE (November 13, 2007): The vendor states that the issue affecting the 'username' parameter is being addressed in BosMarket 6.1. The vendor refutes claims that other parameters are affected, stating that HTML code is stripped with the exception of certain parameters that will accept HTML only if the user has administrator privileges. Please see the references for more information.
Exploit / POC
BosDev BosMarket Multiple HTML Injection Vulnerabilities
Attackers can exploit these issues via a browser.
Attackers can exploit these issues via a browser.
Solution / Fix
BosDev BosMarket Multiple HTML Injection Vulnerabilities
Solution:
The vendor states that the issue affecting the 'username' parameter is being addressed in BosMarket 6.1. Please contact the vendor for information on when this version will be available and how to obtain and install it.
Please see the references for more information.
Solution:
The vendor states that the issue affecting the 'username' parameter is being addressed in BosMarket 6.1. Please contact the vendor for information on when this version will be available and how to obtain and install it.
Please see the references for more information.
References
BosDev BosMarket Multiple HTML Injection Vulnerabilities
References:
References: