OpenBB Board.PHP Cross-Site Scripting Vulnerability
BID:9303
Info
OpenBB Board.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 9303 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 27 2003 12:00AM |
| Updated: | Dec 27 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to gr00vy <[email protected]>. |
| Vulnerable: |
OpenBB OpenBB 1.0.6 OpenBB OpenBB 1.0.5 OpenBB OpenBB 1.0 .0 RC3 OpenBB OpenBB 1.0 .0 RC2 OpenBB OpenBB 1.0 .0 RC1 OpenBB OpenBB 1.0 .0 beta1 |
| Not Vulnerable: | |
Discussion
OpenBB Board.PHP Cross-Site Scripting Vulnerability
OpenBB is prone to a cross-site scripting vulnerability in the 'board.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI parameters. This input will be included in dynamically generated web pages. A remote attacker could exploit this issue by embedding hostile HTML and script code in a malicious link to the vulnerable script.
OpenBB is prone to a cross-site scripting vulnerability in the 'board.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI parameters. This input will be included in dynamically generated web pages. A remote attacker could exploit this issue by embedding hostile HTML and script code in a malicious link to the vulnerable script.
Exploit / POC
OpenBB Board.PHP Cross-Site Scripting Vulnerability
The following proof of concept has been supplied:
http://www.example.com/board.php?FID=%3Cscript%3Ealert(document.cookie)%3C/script%3E
The following proof of concept has been supplied:
http://www.example.com/board.php?FID=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Solution / Fix
OpenBB Board.PHP Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.