WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
BID:31661
Info
WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 31661 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-6161 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2008 12:00AM |
| Updated: | Feb 25 2009 07:17PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
WOW Raid Manager WOW Raid Manager 3.5 |
| Not Vulnerable: |
WOW Raid Manager WOW Raid Manager 3.5.1 |
Discussion
WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
WOW Raid Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
Versions prior to WOW Raid Manager 3.5.1 are vulnerable.
WOW Raid Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
Versions prior to WOW Raid Manager 3.5.1 are vulnerable.
Exploit / POC
WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Solution / Fix
WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
Solution:
The vendor has released an update to address this issue. Please see the references for more information.
WOW Raid Manager WOW Raid Manager 3.5
Solution:
The vendor has released an update to address this issue. Please see the references for more information.
WOW Raid Manager WOW Raid Manager 3.5
-
WOW Raid Manager wowRaidManager_v3.5.1.zip
http://downloads.sourceforge.net/wowraidmanager/wowRaidManager_v3.5.1. zip?modtime=1223482604&big_mirror=0&filesize=722802
References
WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
References:
References:
- Closed Support Question 3.5.1 RC1 PATCH 2 (WOW Raid Manager)
- WOW Raid Manager 3.5.1 Release Notes (WOW Raid Manager)
- WOW Raid Manager Homepage (WOW Raid Manager)