Escapade Scripting Engine PAGE Parameter Cross-Site Scripting Vulnerability

Bugtraq ID:	8573
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 09 2003 12:00AM
Updated:	Sep 09 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Bahaa Naamneh <[email protected]>.
Vulnerable:	Squished Mosquito Escapade 0.2.1 Beta
Not Vulnerable:	Squished Mosquito Escapade 0.3.4

Escapade Scripting Engine PAGE Parameter Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values.

An attacker could exploit this issue to execute arbitrary HTML code in the browser of a remote user who follows a malicious link. Code execution would occur in the context of the vulnerable site. It has also been reported that this issue may be exploited to disclose the installation path of the affected software.

Escapade Scripting Engine PAGE Parameter Cross-Site Scripting Vulnerability

The following proof of concept has been supplied:

http://www.example.com/cgi-bin/esp?PAGE=<script>alert(document.domain)
</script>

Escapade Scripting Engine PAGE Parameter Cross-Site Scripting Vulnerability

Solution:
The vendor has stated that this issue is resolved in Escapde version 0.3.4 (build 1300). See the vendor site for additional details.

Escapade Scripting Engine PAGE Parameter Cross-Site Scripting Vulnerability

References:

• Escapade Homepage (Squished Mosquito)
  
• Escapade Scripting Engine XSS Vulnerability and Path Disclosure (Bahaa Naamneh )