PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
BID:3807
Info
PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 3807 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 06 2002 12:00AM |
| Updated: | Jan 06 2002 12:00AM |
| Credit: | This vulnerability was submitted to the Vuln-Dev Mailing List on January 6th, 2002 by frog frog <[email protected]>. |
| Vulnerable: |
Lebios phptonuke.php 1.0 |
| Not Vulnerable: | |
Discussion
PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
phptonuke.php is a PHPNuke AddOn script to insert a PHP script into the middle of a PHPNuke site. It is written and maintained by Lebios.
It is possible for a malicious user to create a link to the phptonuke.php script which contains script code. When an unsuspecting web user browses the link, the script code will be executed in their browser in the context of the PHPNuke site.
This type of attack may be used to hijack a legitimate user's session via theft of cookie-based authentication credentials.
phptonuke.php is a PHPNuke AddOn script to insert a PHP script into the middle of a PHPNuke site. It is written and maintained by Lebios.
It is possible for a malicious user to create a link to the phptonuke.php script which contains script code. When an unsuspecting web user browses the link, the script code will be executed in their browser in the context of the PHPNuke site.
This type of attack may be used to hijack a legitimate user's session via theft of cookie-based authentication credentials.
Exploit / POC
PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
The following example will display an alert box:
http://phpnukesite/phptonuke.php?filnavn=<script>alert
(document.cookie)</script>
The following example will display an alert box:
http://phpnukesite/phptonuke.php?filnavn=<script>alert
(document.cookie)</script>
Solution / Fix
PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHPNuke AddOn PHPToNuke.PHP Cross-Site Scripting Vulnerability
References:
References: