NPDS News Message HTML Injection Vulnerability
BID:5797
Info
NPDS News Message HTML Injection Vulnerability
| Bugtraq ID: | 5797 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2002 12:00AM |
| Updated: | Sep 25 2002 12:00AM |
| Credit: | Discovery of this vulnerability credited to [email protected]. |
| Vulnerable: |
NPDS NPDS 4.8 |
| Not Vulnerable: | |
Discussion
NPDS News Message HTML Injection Vulnerability
Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client.
NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contains malicious HTML code, the code contained in the posted message would be executed in the browser of the vulnerable user. This will occur in the context of the site running the NPDS software.
Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client.
NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contains malicious HTML code, the code contained in the posted message would be executed in the browser of the vulnerable user. This will occur in the context of the site running the NPDS software.
Exploit / POC
NPDS News Message HTML Injection Vulnerability
The following proof of concept was submitted.
<IMG SRC="javascript:alert('unsecure')">
The following proof of concept was submitted.
<IMG SRC="javascript:alert('unsecure')">
Solution / Fix
NPDS News Message HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.