Mojo Mail Email Form Cross Site Scripting Vulnerability
BID:6040
Info
Mojo Mail Email Form Cross Site Scripting Vulnerability
| Bugtraq ID: | 6040 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2002 12:00AM |
| Updated: | Oct 24 2002 12:00AM |
| Credit: | Discovery credited to Daniel Boland <[email protected]>. |
| Vulnerable: |
Mojo Mail Mojo Mail 2.7 |
| Not Vulnerable: | |
Discussion
Mojo Mail Email Form Cross Site Scripting Vulnerability
Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks.
As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user, in the context of the website running Mojo Mail.
This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software.
Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks.
As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a legitimate user, in the context of the website running Mojo Mail.
This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software.
Exploit / POC
Mojo Mail Email Form Cross Site Scripting Vulnerability
The following proof of concept was provided:
http://www.example.com/cgi-bin/mojo/mojo.cgi?flavor=subscribe&email=%3Cscript%3Ealert%28%22XSS%20Vuln.%22%29%3C%2Fscript%3E&list=skazat_design_newsletter&submit=Submit
The following proof of concept was provided:
http://www.example.com/cgi-bin/mojo/mojo.cgi?flavor=subscribe&email=%3Cscript%3Ealert%28%22XSS%20Vuln.%22%29%3C%2Fscript%3E&list=skazat_design_newsletter&submit=Submit
Solution / Fix
Mojo Mail Email Form Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.