phpGB HTML Injection Vulnerability
BID:5676
Info
phpGB HTML Injection Vulnerability
| Bugtraq ID: | 5676 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1480 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Discovery credited to ppp-design |
| Vulnerable: |
phpGB phpGB 1.1 |
| Not Vulnerable: |
phpGB phpGB 1.2 |
Discussion
phpGB HTML Injection Vulnerability
phpGB is subject to HTML injection attacks.
phpGB fails to check for the presence of HTML tags when generating guestbook entries. It is reported that an attacker may inject HTML and script code into guestbook entries, which will be executed in the web client of the administrative guestbook user when the admin attempts to delete the entry.
phpGB is subject to HTML injection attacks.
phpGB fails to check for the presence of HTML tags when generating guestbook entries. It is reported that an attacker may inject HTML and script code into guestbook entries, which will be executed in the web client of the administrative guestbook user when the admin attempts to delete the entry.
Exploit / POC
phpGB HTML Injection Vulnerability
The following proof of concept code was supplied by ppp-design:
Enter the following guestbookentry:
"delete me <script>alert(document.cookie)</script>"
The following proof of concept code was supplied by ppp-design:
Enter the following guestbookentry:
"delete me <script>alert(document.cookie)</script>"
Solution / Fix
phpGB HTML Injection Vulnerability
Solution:
This issue has been addressed in phpGB 1.2.0 and greater.
Solution:
This issue has been addressed in phpGB 1.2.0 and greater.
References
phpGB HTML Injection Vulnerability
References:
References: