PHP-Fusion 'messages.php' Cross Site Scripting Vulnerability

Bugtraq ID:	33058
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 29 2008 12:00AM
Updated:	Jan 02 2009 07:01PM
Credit:	Nepster
Vulnerable:	PHP-Fusion PHP_Fusion 7.0.3 PHP-Fusion PHP_Fusion 7.0.2 PHP-Fusion PHP_Fusion 7.0.1 PHP-Fusion PHP_Fusion 6.1.4 PHP-Fusion PHP-Fusion 6.1.17 PHP-Fusion PHP-Fusion 6.1.5 PHP-Fusion PHP-Fusion 6.01.10
Not Vulnerable:	PHP-Fusion PHP_Fusion 7.0.4 PHP-Fusion PHP-Fusion 6.1.18

PHP-Fusion 'messages.php' Cross Site Scripting Vulnerability

PHP-Fusion is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to PHP-Fusion 7.00.4 or 6.01.18 are vulnerable.

PHP-Fusion 'messages.php' Cross Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

PHP-Fusion 'messages.php' Cross Site Scripting Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.


PHP-Fusion PHP-Fusion 6.1.17

• PHP-Fusion php-fusion-6-01-18.zip
  http://nchc.dl.sourceforge.net/sourceforge/php-fusion/php-fusion-6-01- 18.zip

PHP-Fusion PHP_Fusion 7.0.3

• PHP-Fusion 7-00-4_update.zip
  http://jaist.dl.sourceforge.net/sourceforge/php-fusion/7-00-4_update.z ip

PHP-Fusion 'messages.php' Cross Site Scripting Vulnerability

References:

• PHP-Fusion Homepage (PHP-Fusion)
  
• Security update for PHP-Fusion 7.00.3 and 6.01.17 (PHP-Fusion)