EasyNews Cross-Agent Scripting Vulnerability
BID:3644
Info
EasyNews Cross-Agent Scripting Vulnerability
| Bugtraq ID: | 3644 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 01 2001 12:00AM |
| Updated: | Dec 01 2001 12:00AM |
| Credit: | This vulnerability was submitted to BugTraq on December 1st, 2001 by "markus arndt" <[email protected]>. |
| Vulnerable: |
easyScripts easyNews 1.5 |
| Not Vulnerable: | |
Discussion
EasyNews Cross-Agent Scripting Vulnerability
EasyNews is a free, open-source script for displaying news stories on a website.
EasyNews does not adequately filter HTML tags from items that are posted. As a result, it is possible to submit a post which contains maliciously crafted script code, which will be executed on the web user viewing the post.
EasyNews does allow an administrator to moderate posted comments. However, this issue may be exploited by a remote attacker in combination with BugTraq ID 3643, "EasyNews NewsDatabase/Template Modification Vulnerability", to effectively allow the remote attacker to post unmoderated content to a website running EasyNews.
Earlier versions may also be vulnerable.
EasyNews is a free, open-source script for displaying news stories on a website.
EasyNews does not adequately filter HTML tags from items that are posted. As a result, it is possible to submit a post which contains maliciously crafted script code, which will be executed on the web user viewing the post.
EasyNews does allow an administrator to moderate posted comments. However, this issue may be exploited by a remote attacker in combination with BugTraq ID 3643, "EasyNews NewsDatabase/Template Modification Vulnerability", to effectively allow the remote attacker to post unmoderated content to a website running EasyNews.
Earlier versions may also be vulnerable.
Exploit / POC
EasyNews Cross-Agent Scripting Vulnerability
This issue can be exploited with a web browser.
This issue can be exploited with a web browser.
Solution / Fix
EasyNews Cross-Agent Scripting Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.