Working Resources BadBlue cleanSearchString() Cross Site Scripting Vulnerability
BID:5179
Info
Working Resources BadBlue cleanSearchString() Cross Site Scripting Vulnerability
| Bugtraq ID: | 5179 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 08 2002 12:00AM |
| Updated: | Jul 08 2002 12:00AM |
| Credit: | Discovered by Matthew Murphy <[email protected]>. |
| Vulnerable: |
Working Resources Inc. BadBlue Personal Edition 1.7.3 |
| Not Vulnerable: | |
Discussion
Working Resources BadBlue cleanSearchString() Cross Site Scripting Vulnerability
BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web interface, generated by an included web server running on the local system.
A variant to BID 5086 has been reported to exist. Reportedly, EXT.DLL has been re-designed to pass user input to the cleanSearchString function. Unfortunately, this function is implemented as client side javascript, and unsanitized input must be displayed on the client machine as it is passed to the cleanSearchString function.
Additionally, user supplied input is displayed as the hidden form value "a0" without being sanitized.
BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web interface, generated by an included web server running on the local system.
A variant to BID 5086 has been reported to exist. Reportedly, EXT.DLL has been re-designed to pass user input to the cleanSearchString function. Unfortunately, this function is implemented as client side javascript, and unsanitized input must be displayed on the client machine as it is passed to the cleanSearchString function.
Additionally, user supplied input is displayed as the hidden form value "a0" without being sanitized.
Exploit / POC
Working Resources BadBlue cleanSearchString() Cross Site Scripting Vulnerability
The following search strings will demonstrate this vulnerability:
"hi"'));alert("ZING!!!");document.write(cleanSearchString('a
"><script>alert("ZING!!!");</script><
The following search strings will demonstrate this vulnerability:
"hi"'));alert("ZING!!!");document.write(cleanSearchString('a
"><script>alert("ZING!!!");</script><
References
Working Resources BadBlue cleanSearchString() Cross Site Scripting Vulnerability
References:
References:
- BadBlue Product Homepage (Working Resources Inc)
- BID 5086: Working Resources BadBlue EXT.DLL Cross Site Scripting Vulnerability (SecurityFocus)