YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability
BID:5078
Info
YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability
| Bugtraq ID: | 5078 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0955 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2002 12:00AM |
| Updated: | Jul 11 2009 01:56PM |
| Credit: | Discovered by methodic <[email protected]>. |
| Vulnerable: |
YaBB YaBB 1 Gold - SP 1 |
| Not Vulnerable: | |
Discussion
YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability
It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages.
YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to execute. If such a URL is sent to a YaBB user, upon accessing the link, the attacker-supplied code will run in the context of the site running the vulnerable software.
This issue may be exploited to steal cookie-based authentication credentials from legitimate users of YaBB.
It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages.
YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to execute. If such a URL is sent to a YaBB user, upon accessing the link, the attacker-supplied code will run in the context of the site running the vulnerable software.
This issue may be exploited to steal cookie-based authentication credentials from legitimate users of YaBB.
Exploit / POC
YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability
methodic <[email protected]> has provided the following exploit information:
http://some.site.com/cgi-bin/YaBB/YaBB.cgi?board=BOARD&action=display&num=<script>alert()</script>
methodic <[email protected]> has provided the following exploit information:
http://some.site.com/cgi-bin/YaBB/YaBB.cgi?board=BOARD&action=display&num=<script>alert()</script>
Solution / Fix
YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.