Mambo Site Server index.php Cross Site Scripting Vulnerability

Bugtraq ID:	7135
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 18 2003 12:00AM
Updated:	Mar 18 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Ertan Kurt <[email protected]>.
Vulnerable:	Mambo Mambo Site Server 4.0.10
Not Vulnerable:

Mambo Site Server index.php Cross Site Scripting Vulnerability

Mambo Site Server has been reported prone to a cross-site scripting vulnerability.

It has been reported that certain user supplied URI parameters are not sufficiently sanitized by the Mambo Site Server. As a result of this deficiency an attacker may create a specially crafted URL that includes malicious HTML code passed to the index page used by Mambo Site server.

This may allow for theft of cookie-based authentication credentials and other attacks.

This vulnerability was reported to affect Mambo Site Server version 4.0.10 it is not currently known if other versions are affected.

Mambo Site Server index.php Cross Site Scripting Vulnerability

The following proof of concept was provided:

http://www.example.com/index.php?option=search&searchword=<script>alert(document.cookie);</script>

Mambo Site Server index.php Cross Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Mambo Site Server index.php Cross Site Scripting Vulnerability

References:

• Mambo Project Homepage (Mambo)
  
• Some XSS vulns (Ertan Kurt )