Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
BID:32065
Info
Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 32065 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-6684 CVE-2008-6683 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 02 2008 12:00AM |
| Updated: | Jul 05 2016 10:01PM |
| Credit: | ZoRLu |
| Vulnerable: |
eZoneScripts Apartment Search Script 0 |
| Not Vulnerable: | |
Discussion
Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
Apartment Search Script is prone to an arbitrary-file-upload vulnerability that lets attackers upload and execute arbitrary code. The application is also prone to a cross-site scripting issue. These issues occur because the application fails to sufficiently sanitize user-supplied input.
Attackers can exploit these issues to steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the webserver, and launch other attacks.
Apartment Search Script is prone to an arbitrary-file-upload vulnerability that lets attackers upload and execute arbitrary code. The application is also prone to a cross-site scripting issue. These issues occur because the application fails to sufficiently sanitize user-supplied input.
Attackers can exploit these issues to steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the webserver, and launch other attacks.
Exploit / POC
Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
Attackers may exploit this issue through a browser.
The following exploit URIs are available:
For the file-upload issue:
http://www.example.com/script_path/Member_Admin/logo/[id]your_shell.php
For the cross-site scripting issue:
http://www.example.com/listtest.php?r="><script>alert()</script>
Attackers may exploit this issue through a browser.
The following exploit URIs are available:
For the file-upload issue:
http://www.example.com/script_path/Member_Admin/logo/[id]your_shell.php
For the cross-site scripting issue:
http://www.example.com/listtest.php?r="><script>alert()</script>
Solution / Fix
Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Apartment Search Script Arbitrary File Upload and Cross Site Scripting Vulnerabilities
References:
References:
- Apartment Search Script (eZoneScripts)