Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
BID:45600
Info
Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 45600 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4693 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 28 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Janek Vind "waraxe" |
| Vulnerable: |
Coppermine Photo Gallery 1.5.10 |
| Not Vulnerable: | |
Discussion
Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Coppermine Photo Gallery 1.5.10 is vulnerable; other versions may also be affected.
Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Coppermine Photo Gallery 1.5.10 is vulnerable; other versions may also be affected.
Exploit / POC
Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/cpg.1.5.10/help.php?base=1
&h=czozMzoiPHNjcmlwdD5hbGVydCgnaGVhZGVyJyk7PC9zY3JpcHQ%2bIjs
&t=czozMToiPHNjcmlwdD5hbGVydCgndGV4dCcpOzwvc2NyaXB0PiI7
The following exploit is available:
Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/cpg.1.5.10/help.php?base=1
&h=czozMzoiPHNjcmlwdD5hbGVydCgnaGVhZGVyJyk7PC9zY3JpcHQ%2bIjs
&t=czozMToiPHNjcmlwdD5hbGVydCgndGV4dCcpOzwvc2NyaXB0PiI7
The following exploit is available:
Solution / Fix
Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities
References:
References:
- [waraxe-2010-SA#079] - Reflected XSS in Coppermine 1.5.10 (Janek Vind "waraxe")
- Coppermine Photo Gallery Homepage (Coppermine Photo Gallery)