FotoWeb Multiple Cross Site Scripting Vulnerabilities
BID:33677
Info
FotoWeb Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 33677 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-0573 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2009 12:00AM |
| Updated: | Apr 13 2015 09:11PM |
| Credit: | Stelios Tigkas |
| Vulnerable: |
FotoWare FotoWeb 6.0 |
| Not Vulnerable: | |
Discussion
FotoWeb Multiple Cross Site Scripting Vulnerabilities
FotoWeb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
FotoWeb 6.0 is vulnerable; other versions may also be affected.
FotoWeb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
FotoWeb 6.0 is vulnerable; other versions may also be affected.
Exploit / POC
FotoWeb Multiple Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/fotoweb/cmdrequest/Login.fwx?s="><script>alert(â??0wn3dâ?)</script>
http://www.example.com/fotoweb/Grid.fwx?&search=<script>alert("0wn3dâ?)</script> and (FQYFT
contains(JPEG))
An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/fotoweb/cmdrequest/Login.fwx?s="><script>alert(â??0wn3dâ?)</script>
http://www.example.com/fotoweb/Grid.fwx?&search=<script>alert("0wn3dâ?)</script> and (FQYFT
contains(JPEG))
Solution / Fix
FotoWeb Multiple Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
FotoWeb Multiple Cross Site Scripting Vulnerabilities
References:
References:
- FotoWeb Homepage (FotoWare)
- FotoWeb Multiple Cross-Site Scripting Vulnerabilities (FortConsult�??s Security Research Team)