Geeklog Homepage User Field HTML Injection Vulnerability

Bugtraq ID:	6604
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 14 2003 12:00AM
Updated:	Jan 14 2003 12:00AM
Credit:	Discovery of this issue is credited to snooq <[email protected]>.
Vulnerable:	Geeklog Geeklog 1.3.7
Not Vulnerable:	Geeklog Geeklog 1.3.7 sr1

Geeklog Homepage User Field HTML Injection Vulnerability

Geeklog is prone to HTML injection attacks.

The user account 'Homepage' field is not sufficiently sanitized of HTML and script code. As a result, a malicious user may inject malicious HTML and script code into this field. When the malicious user's account information is displayed to other web users, the attacker-supplied code will be interpreted in their web client in the security context of the site hosting the vulnerable software.

Geeklog Homepage User Field HTML Injection Vulnerability

There is no exploit required. The following example was submitted:

http://url" onmouseover="alert(document.cookie)

Geeklog Homepage User Field HTML Injection Vulnerability

Solution:
This issue was addressed in Geeklog 1.3.7 sr1.


Geeklog Geeklog 1.3.7

• Geeklog Geeklog 1.3.7 sr1
  http://www.geeklog.net/filemgmt/visit.php?lid=101

Geeklog Homepage User Field HTML Injection Vulnerability

References:

• Multiple XSS in Geeklog 1.3.7 (snooq )