PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
BID:4952
Info
PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
| Bugtraq ID: | 4952 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 06 2002 12:00AM |
| Updated: | Jun 06 2002 12:00AM |
| Credit: | Credited to Ahmet Sabri ALPER <[email protected]>. |
| Vulnerable: |
Ekilat LLC php(Reactor) 1.2.7 |
| Not Vulnerable: |
Ekilat LLC php(Reactor) 1.2.7 pl1 |
Discussion
PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
php(Reactor) is an integrated system of web applications designed for easy website maintenance. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
It is reported that php(Reactor) is vulnerable to cross site scripting attacks.
Attackers may exploit this vulnerability by constructing a link to one of these scripts containing malicious HTML code. If the link is sent to a php(Reactor) user and clicked on, the attacker-supplied HTML code will run in the context of the user's php(Reactor) session. The HTML code may obtain cookie values or perform unauthorized actions as the victim user.
php(Reactor) is an integrated system of web applications designed for easy website maintenance. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
It is reported that php(Reactor) is vulnerable to cross site scripting attacks.
Attackers may exploit this vulnerability by constructing a link to one of these scripts containing malicious HTML code. If the link is sent to a php(Reactor) user and clicked on, the attacker-supplied HTML code will run in the context of the user's php(Reactor) session. The HTML code may obtain cookie values or perform unauthorized actions as the victim user.
Exploit / POC
PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
Solution:
The vendor has provided a new version of the software.
Ekilat LLC php(Reactor) 1.2.7
Solution:
The vendor has provided a new version of the software.
Ekilat LLC php(Reactor) 1.2.7
-
Elikat LLC phpreactor-1.2.7pl1.tar.gz
http://prdownloads.sourceforge.net/phpreactor/phpreactor-1.2.7pl1.tar. gz?download
References
PHPReactor Global.INC.PHP Cross Site Scripting Vulnerability
References:
References:
- php(Reactor) Homepage (php(Reactor))