SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
BID:37156
Info
SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
| Bugtraq ID: | 37156 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2009 12:00AM |
| Updated: | Dec 01 2009 06:34PM |
| Credit: | SoldierOfAllah |
| Vulnerable: |
Xoops SmartMedia 0.85 Beta |
| Not Vulnerable: | |
Discussion
SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
SmartMedia 0.85 Beta is affected; other versions may also be vulnerable.
The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
SmartMedia 0.85 Beta is affected; other versions may also be vulnerable.
Exploit / POC
SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/modules/smartmedia/folder.php?categoryid=1>"><ScRiPt>alert(0);</ScRiPt>&folderid=1&start=0
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/modules/smartmedia/folder.php?categoryid=1>"><ScRiPt>alert(0);</ScRiPt>&folderid=1&start=0
Solution / Fix
SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SmartMedia Module for XOOPS 'categoryid' Parameter Cross Site Scripting Vulnerability
References:
References:
- SmartMedia Homepage (XOOPS)