BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
BID:29133
Info
BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
| Bugtraq ID: | 29133 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2524 |
| Remote: | Yes |
| Local: | No |
| Published: | May 10 2008 12:00AM |
| Updated: | May 07 2015 05:29PM |
| Credit: | David Sopas Ferreira |
| Vulnerable: |
BlogPHP BlogPHP 2.0 |
| Not Vulnerable: | |
Discussion
BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue.
Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, and gain access as an arbitrary user.
BlogPHP 2.0 is vulnerable; other versions may also be affected.
BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue.
Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, and gain access as an arbitrary user.
BlogPHP 2.0 is vulnerable; other versions may also be affected.
Exploit / POC
BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
Attackers can exploit these issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following proof of concept for the cross-site scripting issue is available:
http://www.example.com/index.php?act=sendmessage&user=admin[XSS]
Attackers can exploit these issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following proof of concept for the cross-site scripting issue is available:
http://www.example.com/index.php?act=sendmessage&user=admin[XSS]
Solution / Fix
BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
BlogPHP Multiple HTML Injection, Cross-Site Scripting and Cookie Manipulation Vulnerabilities
References:
References:
- BlogPHP Homepage (BlogPHP)
- XSS, HTML Injection and Cookie Manipulation in BlogPHP v2.0 (David Sopas Ferreira)