Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
BID:4192
Info
Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
| Bugtraq ID: | 4192 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2002 12:00AM |
| Updated: | Feb 27 2002 12:00AM |
| Credit: | This issue was reported to BugTraq by "Justin" <[email protected]>. |
| Vulnerable: |
Snitz Forums 2000 Snitz Forums 2000 3.3 .03 Snitz Forums 2000 Snitz Forums 2000 3.3 .02 Snitz Forums 2000 Snitz Forums 2000 3.3 .01 Snitz Forums 2000 Snitz Forums 2000 3.3 Snitz Forums 2000 Snitz Forums 2000 3.1 Snitz Forums 2000 Snitz Forums 2000 3.0 |
| Not Vulnerable: | |
Discussion
Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems.
Snitz Forums 2000 allows users to include images in forum messages using image tags, with the following syntax:
[img]url of image[/img]
It is possible to inject arbitrary script code into forum messages via these image tags. Script code will be executed in the browser of the user viewing the forum message, in the context of the website running the vulnerable software. This may allow an attacker to steal cookie-based authentication credentials.
Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems.
Snitz Forums 2000 allows users to include images in forum messages using image tags, with the following syntax:
[img]url of image[/img]
It is possible to inject arbitrary script code into forum messages via these image tags. Script code will be executed in the browser of the user viewing the forum message, in the context of the website running the vulnerable software. This may allow an attacker to steal cookie-based authentication credentials.
Exploit / POC
Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
The following example should reproduce this condition:
[img]javasCript:alert('Hello world.')[/img]
The following example should reproduce this condition:
[img]javasCript:alert('Hello world.')[/img]
Solution / Fix
Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
Solution:
The vendor has released a patch which may only be applied to v3.3.03. Users of older versions are advised to upgrade to v3.3.03 and then apply the patch.
Snitz Forums 2000 Snitz Forums 2000 3.3 .03
Solution:
The vendor has released a patch which may only be applied to v3.3.03. Users of older versions are advised to upgrade to v3.3.03 and then apply the patch.
Snitz Forums 2000 Snitz Forums 2000 3.3 .03
-
Snitz Forums 2000 sf2k_v33_033.zip
http://forum.snitz.com/download.asp
References
Snitz Forums 2000 Image Tag Cross-Agent Scripting Vulnerability
References:
References:
- Snitz Forums 2000 Homepage (Snitz Forums 2000)