PHP TopSites help.php Cross Site Scripting Vulnerability
BID:6622
Info
PHP TopSites help.php Cross Site Scripting Vulnerability
| Bugtraq ID: | 6622 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 15 2003 12:00AM |
| Updated: | Jan 15 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to the Cyberarmy Application and Code Auditing Team <[email protected]>. |
| Vulnerable: |
iTop10 PHP TopSites Pro 2.2 iTop10 PHP TopSites Free 2.0 B |
| Not Vulnerable: | |
Discussion
PHP TopSites help.php Cross Site Scripting Vulnerability
A vulnerability has been discovered in PHP TopSites. Due to invalid sanitization of user-supplied input by the 'help.php' script, it may be possible for an attacker to steal another users cookie information or other sensitive data.
This issue can be exploited by constructing a malicious URL containing embedded script code as a 'help.php' parameter. When an unsuspecting user follows the link sensitive information, such as cookie-based authentication credentials may be obtained by the attacker.
A vulnerability has been discovered in PHP TopSites. Due to invalid sanitization of user-supplied input by the 'help.php' script, it may be possible for an attacker to steal another users cookie information or other sensitive data.
This issue can be exploited by constructing a malicious URL containing embedded script code as a 'help.php' parameter. When an unsuspecting user follows the link sensitive information, such as cookie-based authentication credentials may be obtained by the attacker.
Exploit / POC
PHP TopSites help.php Cross Site Scripting Vulnerability
The following proof of concept has been made available:
http://somewebsitesite/TopSitesdirectory/help.php?sid=<script>alert
(document.cookie)</script>
The following proof of concept has been made available:
http://somewebsitesite/TopSitesdirectory/help.php?sid=<script>alert
(document.cookie)</script>
Solution / Fix
PHP TopSites help.php Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP TopSites help.php Cross Site Scripting Vulnerability
References:
References:
- Multiple PHP Topsites Vulnerabities found (Cyberarmy Application and Code Auditing Team