OpenBB BBCode Cross Agent HTML Injection Vulnerability
BID:4819
Info
OpenBB BBCode Cross Agent HTML Injection Vulnerability
| Bugtraq ID: | 4819 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2002 12:00AM |
| Updated: | May 24 2002 12:00AM |
| Credit: | Posted to BugTraq by frog frog <[email protected]>. |
| Vulnerable: |
OpenBB OpenBB 1.0 .0 RC3 |
| Not Vulnerable: | |
Discussion
OpenBB BBCode Cross Agent HTML Injection Vulnerability
OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
OpenBB is reportedly vulnerable to HTML injection attacks. The vulnerability occurs when HTML code is replaced with BBCodes.
OpenBB uses 'BBCodes' in the place of HTML code to include images, links etc. However, HTML tags are not adequately replaced from with BBCodes. It is possible to inject arbitrary HTML code into forum messages. As a result, OpenBB is prone to cross-agent scripting attacks. Script code will be executed in the browser of the user viewing the forum message and may allow an attacker to steal cookie-based authentication credentials.
OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
OpenBB is reportedly vulnerable to HTML injection attacks. The vulnerability occurs when HTML code is replaced with BBCodes.
OpenBB uses 'BBCodes' in the place of HTML code to include images, links etc. However, HTML tags are not adequately replaced from with BBCodes. It is possible to inject arbitrary HTML code into forum messages. As a result, OpenBB is prone to cross-agent scripting attacks. Script code will be executed in the browser of the user viewing the forum message and may allow an attacker to steal cookie-based authentication credentials.
Exploit / POC
OpenBB BBCode Cross Agent HTML Injection Vulnerability
The following proof of concept was provided:
[ img]http:// " onerror="ANYSCRIPT"[/img ]
The following proof of concept was provided:
[ img]http:// " onerror="ANYSCRIPT"[/img ]
Solution / Fix
OpenBB BBCode Cross Agent HTML Injection Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.