Sage Content Management System Cross Site Scripting Vulnerability

Bugtraq ID:	6894
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 20 2003 12:00AM
Updated:	Feb 20 2003 12:00AM
Credit:	Discovery credited to euronymous <[email protected]>.
Vulnerable:	Sage Sage 1.0 beta 3
Not Vulnerable:

Sage Content Management System Cross Site Scripting Vulnerability

Sage is prone to a cross site scripting vulnerability.

This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting Sage, which contains malicious HTML or script code.

When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client.

Sage Content Management System Cross Site Scripting Vulnerability

There is no exploit required. The following example was submitted:

http://hostname/?mod=<script>alert(document.cookie)</script>&op=browse

Sage Content Management System Cross Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sage Content Management System Cross Site Scripting Vulnerability

References:

• Sage Home Page (Sage)
  
• XSS and Path Disclosure in Sage ("euronymous" )