Phorum Message Form Field HTML Injection Variant Vulnerability
BID:7545
Info
Phorum Message Form Field HTML Injection Variant Vulnerability
| Bugtraq ID: | 7545 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2003 12:00AM |
| Updated: | May 09 2003 12:00AM |
| Credit: | Discovery of this issue is credited to WiciU <[email protected]>. |
| Vulnerable: |
Phorum Phorum 3.4.2 Phorum Phorum 3.4.1 Phorum Phorum 3.4 |
| Not Vulnerable: |
Phorum Phorum 3.4.3 |
Discussion
Phorum Message Form Field HTML Injection Variant Vulnerability
An HTML injection issue has been reported which may lead to unauthorized code execution.
It has been reported that it is possible to inject HTML or script code into the subject and other fields of a message in Phorum. This may be done by including code in message fields before sending a message to the target victim.
This issue is a variant of the vulnerability described in BID 7262 that also affects Phorum 3.4.2.
An HTML injection issue has been reported which may lead to unauthorized code execution.
It has been reported that it is possible to inject HTML or script code into the subject and other fields of a message in Phorum. This may be done by including code in message fields before sending a message to the target victim.
This issue is a variant of the vulnerability described in BID 7262 that also affects Phorum 3.4.2.
Exploit / POC
Phorum Message Form Field HTML Injection Variant Vulnerability
The following proof-of-concept was provided by WiciU <[email protected]>:
<<b>script>alert(document.cookie);<<b>/script>
The following proof-of-concept was provided by WiciU <[email protected]>:
<<b>script>alert(document.cookie);<<b>/script>
Solution / Fix
Phorum Message Form Field HTML Injection Variant Vulnerability
Solution:
This issue has been addressed in Phorum 3.4.3. Users are advised to upgrade.
Phorum Phorum 3.4
Phorum Phorum 3.4.1
Phorum Phorum 3.4.2
Solution:
This issue has been addressed in Phorum 3.4.3. Users are advised to upgrade.
Phorum Phorum 3.4
-
Phorum phorum-3.4.3.tar.gz
http://phorum.org/downloads/phorum-3.4.3.tar.gz
Phorum Phorum 3.4.1
-
Phorum phorum-3.4.3.tar.gz
http://phorum.org/downloads/phorum-3.4.3.tar.gz
Phorum Phorum 3.4.2
-
Phorum phorum-3.4.3.tar.gz
http://phorum.org/downloads/phorum-3.4.3.tar.gz
References
Phorum Message Form Field HTML Injection Variant Vulnerability
References:
References:
- Phorum Homepage (Phorum)
- A Phorum's bug... (WiciU
) - Re: A Phorum's bug... (Brian Moon
)