Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
BID:9308
Info
Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
| Bugtraq ID: | 9308 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 27 2003 12:00AM |
| Updated: | Dec 27 2003 12:00AM |
| Credit: | Discovery is credited to David S. Ferreira. |
| Vulnerable: |
Private Message System Private Message System 2.2.8 Private Message System Private Message System 2.2.7 Private Message System Private Message System 2.2.6 Private Message System Private Message System 2.2.5 Private Message System Private Message System 2.2.4 Private Message System Private Message System 2.2.3 Private Message System Private Message System 2.2.2 Private Message System Private Message System 2.2.1 -PR1 Private Message System Private Message System 2.2.1 Private Message System Private Message System 2.1.1 Private Message System Private Message System 2.1 .0 beta Private Message System Private Message System 2.0.5 Private Message System Private Message System 2.0.4 |
| Not Vulnerable: |
Private Message System Private Message System 2.3 .0 |
Discussion
Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
Private Message System is prone to a cross-site scripting vulnerability. This issue may be exploited by creating a malicious link to a site hosting the software with hostile HTML and script code embedded in URI parameters. If the link is followed, the attacker-supplied code may be rendered in the victim user's browser.
Possible consequences of exploitation include theft of cookie-based authentication credentials or using the issue as an attack vector to exploit latent web browser security flaws.
Private Message System is prone to a cross-site scripting vulnerability. This issue may be exploited by creating a malicious link to a site hosting the software with hostile HTML and script code embedded in URI parameters. If the link is followed, the attacker-supplied code may be rendered in the victim user's browser.
Possible consequences of exploitation include theft of cookie-based authentication credentials or using the issue as an attack vector to exploit latent web browser security flaws.
Exploit / POC
Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
The following example was provided:
http://www.example.com/index.php?page=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E
The following example was provided:
http://www.example.com/index.php?page=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E
Solution / Fix
Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
Solution:
This vulnerability has been addressed in Private Message System 2.3.0.
Private Message System Private Message System 2.0.4
Private Message System Private Message System 2.0.5
Private Message System Private Message System 2.1 .0 beta
Private Message System Private Message System 2.1.1
Private Message System Private Message System 2.2.1 -PR1
Private Message System Private Message System 2.2.1
Private Message System Private Message System 2.2.2
Private Message System Private Message System 2.2.3
Private Message System Private Message System 2.2.4
Private Message System Private Message System 2.2.5
Private Message System Private Message System 2.2.6
Private Message System Private Message System 2.2.7
Private Message System Private Message System 2.2.8
Solution:
This vulnerability has been addressed in Private Message System 2.3.0.
Private Message System Private Message System 2.0.4
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.0.5
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.1 .0 beta
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.1.1
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.1 -PR1
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.1
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.2
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.3
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.4
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.5
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.6
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.7
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
Private Message System Private Message System 2.2.8
-
Private Message System Private Message System 2.3.0
http://sourceforge.net/project/showfiles.php?group_id=70228
References
Private Message System index.php Page Parameter Cross-Site Scripting Vulnerability
References:
References:
- Private Message System Homepage (Private Message System)