phpBB Script Injection Vulnerability
BID:6248
Info
phpBB Script Injection Vulnerability
| Bugtraq ID: | 6248 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 25 2002 12:00AM |
| Updated: | Nov 25 2002 12:00AM |
| Credit: | Discovery is credited to Pete Foster <[email protected]>. |
| Vulnerable: |
phpBB Group phpBB 2.0.3 |
| Not Vulnerable: | |
Discussion
phpBB Script Injection Vulnerability
phpBB does not properly sanitize user input in forum postings. This could allow a malicious user to inject script code into a forum post which would in turn be executed when the page is viewed by other users.
Script code would be executed in the security context of the phpBB site.
Supplied script code may access authentication credentials, or take actions as an authenticated user.
phpBB does not properly sanitize user input in forum postings. This could allow a malicious user to inject script code into a forum post which would in turn be executed when the page is viewed by other users.
Script code would be executed in the security context of the phpBB site.
Supplied script code may access authentication credentials, or take actions as an authenticated user.
Exploit / POC
phpBB Script Injection Vulnerability
The following proof of concept code was supplied by Pete Foster <[email protected]>:
<b onMouseOver="alert(document.location);">This piece of text could be
dangerous if you were to move your mouse over it!</b>
<i onClick="alert(document.location);">This piece of text could be dangerous
if you were to click it!</i>
<u onClick="alert('Hello');">This piece of text could be dangerous if you
were to click it!</u>
The following proof of concept code was supplied by Pete Foster <[email protected]>:
<b onMouseOver="alert(document.location);">This piece of text could be
dangerous if you were to move your mouse over it!</b>
<i onClick="alert(document.location);">This piece of text could be dangerous
if you were to click it!</i>
<u onClick="alert('Hello');">This piece of text could be dangerous if you
were to click it!</u>
Solution / Fix
phpBB Script Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
phpBB Script Injection Vulnerability
References:
References:
- [Sec-Tec Advisory] Local scripting vulnerability in phpBB (Pete Foster