Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
BID:50295
Info
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
| Bugtraq ID: | 50295 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2011 12:00AM |
| Updated: | Oct 20 2011 12:00AM |
| Credit: | Eyup CELIK |
| Vulnerable: |
Innovate Portal Innovate Portal 2.0 |
| Not Vulnerable: | |
Discussion
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
Innovate Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Innovate Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/index.php?cat=%27%22%28%29%26%251%3cScRiPt%20%3eprompt%28948044%29%3c%2fScRiPt%3e&content=error&sid=57cdbb83e0ab1b879e0a0f91fbf22781&what=user_notfound
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/index.php?cat=%27%22%28%29%26%251%3cScRiPt%20%3eprompt%28948044%29%3c%2fScRiPt%3e&content=error&sid=57cdbb83e0ab1b879e0a0f91fbf22781&what=user_notfound
Solution / Fix
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
References:
References:
- Innovate Portal Homepage (Innovate Portal)