ShoutBox Form Field HTML Injection Vulnerability
BID:5354
Info
ShoutBox Form Field HTML Injection Vulnerability
| Bugtraq ID: | 5354 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1429 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 29 2002 12:00AM |
| Updated: | Jul 11 2009 02:56PM |
| Credit: | Discovery of this issue is credited to "<-delusion->" <[email protected]>. |
| Vulnerable: |
Endity.com shoutBOX 1.2 |
| Not Vulnerable: | |
Discussion
ShoutBox Form Field HTML Injection Vulnerability
shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in execution of attacker-supplied code in the web client of a user who visits such a page. HTML and script code will be executed in the security context of the site hosting the software.
shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in execution of attacker-supplied code in the web client of a user who visits such a page. HTML and script code will be executed in the security context of the site hosting the software.
Exploit / POC
ShoutBox Form Field HTML Injection Vulnerability
The following example was submitted:
In the Site URL text box, type in:
"></a><html code goes here><a href="
The following example was submitted:
In the Site URL text box, type in:
"></a><html code goes here><a href="
Solution / Fix
ShoutBox Form Field HTML Injection Vulnerability
Solution:
Source code modifications supplied by "<-delusion->" <[email protected]> to address this problem have been included in the attached Bugtraq post.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Source code modifications supplied by "<-delusion->" <[email protected]> to address this problem have been included in the attached Bugtraq post.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.