MOJO IWMS 'default.asp' Cookie Manipulation Vulnerability
BID:41746
Info
MOJO IWMS 'default.asp' Cookie Manipulation Vulnerability
| Bugtraq ID: | 41746 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2007 12:00AM |
| Updated: | Dec 17 2007 12:00AM |
| Credit: | cp77fk4r |
| Vulnerable: |
Mojo IWMS 7 |
| Not Vulnerable: | |
Discussion
MOJO IWMS 'default.asp' Cookie Manipulation Vulnerability
MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
MOJO IWMS 7 is vulnerable; other versions may also be affected.
MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
MOJO IWMS 7 is vulnerable; other versions may also be affected.
Exploit / POC
MOJO IWMS 'default.asp' Cookie Manipulation Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/upload/default.asp?mode=wrong&ERRMSG=%3Cmeta+http-equiv='Set-cookie'+content='[Cookie-Name]=[Cookie-Value]'%3E
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/upload/default.asp?mode=wrong&ERRMSG=%3Cmeta+http-equiv='Set-cookie'+content='[Cookie-Name]=[Cookie-Value]'%3E
Solution / Fix
MOJO IWMS 'default.asp' Cookie Manipulation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].