Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
BID:8840
Info
Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
| Bugtraq ID: | 8840 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2003 12:00AM |
| Updated: | Oct 15 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to Lorenzo Hernandez Garcia-Hierro <[email protected]>. |
| Vulnerable: |
Macromedia ColdFusion MX 6.0 |
| Not Vulnerable: | |
Discussion
Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying database. This problem may be exploited by an attacker to construct a malicious link containing HTML or script code that may be rendered in a user's browser upon visiting that link. If successful, an attacker may obtain access to cookie-based authentication credentials that may lead to other attacks. This attack would occur in the security context of the vulnerable site.
Macromedia ColdFusion MX version 6.0 may be vulnerable to this issue, however other versions may be affected as well.
It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying database. This problem may be exploited by an attacker to construct a malicious link containing HTML or script code that may be rendered in a user's browser upon visiting that link. If successful, an attacker may obtain access to cookie-based authentication credentials that may lead to other attacks. This attack would occur in the security context of the vulnerable site.
Macromedia ColdFusion MX version 6.0 may be vulnerable to this issue, however other versions may be affected as well.
Exploit / POC
Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
The following proof of concept has been provided:
http://www.example.com/article.cfm?id=1'<script>alert(document.cookie);</script>
The following proof of concept has been provided:
http://www.example.com/article.cfm?id=1'<script>alert(document.cookie);</script>
Solution / Fix
Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability
References:
References:
- Macromedia Homepage (Macromedia)
- ColdFusion SQL Error Pages XSS ("Lorenzo Hernandez Garcia-Hierro"