Mailtraq Browse.ASP Cross-Site Scripting Vulnerability
BID:7813
Info
Mailtraq Browse.ASP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 7813 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2003 12:00AM |
| Updated: | Jun 04 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to Ziv Kamir <[email protected]>. |
| Vulnerable: |
Fastraq Mailtraq 2.2 |
| Not Vulnerable: | |
Discussion
Mailtraq Browse.ASP Cross-Site Scripting Vulnerability
Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server.
An attacker can exploit this vulnerability by manipulating the 'cfolder' URI parameter to the browse.asp script and sending a link to a victim user. If this link is visited, the attacker-supplied code may be rendered in the browser of the user who visit the malicious link.
Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server.
An attacker can exploit this vulnerability by manipulating the 'cfolder' URI parameter to the browse.asp script and sending a link to a victim user. If this link is visited, the attacker-supplied code may be rendered in the browser of the user who visit the malicious link.
Exploit / POC
Mailtraq Browse.ASP Cross-Site Scripting Vulnerability
The following proof of concept was provided:
http://www.example.org/browse.asp?<script>alert(document.cookie)</script>
The following proof of concept was provided:
http://www.example.org/browse.asp?<script>alert(document.cookie)</script>
Solution / Fix
Mailtraq Browse.ASP Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.