IsolSoft Support Center 'lang' Parameter Multiple Input Validation Vulnerabilities

Bugtraq ID:	35997
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 07 2009 12:00AM
Updated:	Jun 24 2010 03:38PM
Credit:	Moudi
Vulnerable:	IsolSoft Support Center 2.5
Not Vulnerable:

IsolSoft Support Center 'lang' Parameter Multiple Input Validation Vulnerabilities

IsolSoft Support Center is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, multiple local file-include vulnerabilities, and multiple remote file-include vulnerabilities.

An attacker can exploit these issues to execute arbitrary local and remote files within the context of the webserver, execute arbitrary script code, and steal cookie-based authentication credentials.

Support Center 2.5 is vulnerable; other versions may also be affected.

IsolSoft Support Center 'lang' Parameter Multiple Input Validation Vulnerabilities

Attackers can use a browser to exploit these issues. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.

The following example URIs are available:

• /data/vulnerabilities/exploits/35997.txt

IsolSoft Support Center 'lang' Parameter Multiple Input Validation Vulnerabilities

Solution:
The vendor released a patch to address this issue. Please add the following lines to the end of the '"conf/conn.php' script:.

if(isset($_GET['lang'])){
$SEC_lang = array('en','ar','ru');
if(!in_array($_GET['lang'],$SEC_lang)){
header("location:index.php");exit(0);
}
}

IsolSoft Support Center 'lang' Parameter Multiple Input Validation Vulnerabilities

References:

• IsolSoft Homepage (IsolSoft)