EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
BID:28887
Info
EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
| Bugtraq ID: | 28887 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1988 CVE-2008-1987 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | Thomas Pollet |
| Vulnerable: |
Encaps Team EncapsGallery 2.0.2 Encaps Team EncapsGallery 1.11.2 |
| Not Vulnerable: |
Encaps Team EncapsGallery 2.0.4 |
Discussion
EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
EncapsGallery is prone to a cross-site scripting vulnerability and a file-upload vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
EncapsGallery 2.0.2 is vulnerable to both of these issues; EncapsGallery 2.0.4 is vulnerable to the file-upload issue only.
EncapsGallery is prone to a cross-site scripting vulnerability and a file-upload vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
EncapsGallery 2.0.2 is vulnerable to both of these issues; EncapsGallery 2.0.4 is vulnerable to the file-upload issue only.
Exploit / POC
EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
An attacker can exploit these issues with a browser. To exploit the cross-site scripting vulnerability, an attacker must entice an unsuspecting user into following a malicious URI.
An attacker can exploit these issues with a browser. To exploit the cross-site scripting vulnerability, an attacker must entice an unsuspecting user into following a malicious URI.
Solution / Fix
EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
Solution:
The vendor released EncapsGallery 2.0.4, which addresses the cross-site scripting issue. The file-upload issue has not yet been addressed. Please see the references for more information.
Encaps Team EncapsGallery 2.0.2
Solution:
The vendor released EncapsGallery 2.0.4, which addresses the cross-site scripting issue. The file-upload issue has not yet been addressed. Please see the references for more information.
Encaps Team EncapsGallery 2.0.2
-
Encaps Team EncapsGallery-2.0.4.zip
http://www.encaps.net/software/encapsgallery/encapsgallery-2.0.4.zip
References
EncapsGallery Cross-Site Scripting Vulnerability and File Upload Vulnerability
References:
References:
- EncapsGallery Homepage (Encaps Team)