PHP-Nuke GBook Module HTML Injection Vulnerability

Bugtraq ID:	9559
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 03 2004 12:00AM
Updated:	Feb 03 2004 12:00AM
Credit:	The disclosure of this issue has been credited to Janek Vind "waraxe" <[email protected]>.
Vulnerable:	gBook gBook 1.4 + Francisco Burzi PHP-Nuke 7.0 FINAL + Francisco Burzi PHP-Nuke 7.0 + Francisco Burzi PHP-Nuke 6.9 + Francisco Burzi PHP-Nuke 6.7 + Francisco Burzi PHP-Nuke 6.6 + Francisco Burzi PHP-Nuke 6.5 RC3 + Francisco Burzi PHP-Nuke 6.5 RC2 + Francisco Burzi PHP-Nuke 6.5 RC1 + Francisco Burzi PHP-Nuke 6.5 FINAL + Francisco Burzi PHP-Nuke 6.5 BETA 1 + Francisco Burzi PHP-Nuke 6.5 + Francisco Burzi PHP-Nuke 6.0 + Francisco Burzi PHP-Nuke 5.6 + Francisco Burzi PHP-Nuke 5.5 + Francisco Burzi PHP-Nuke 5.4 + Francisco Burzi PHP-Nuke 5.3.1 + Francisco Burzi PHP-Nuke 5.2 a + Francisco Burzi PHP-Nuke 5.2 + Francisco Burzi PHP-Nuke 5.1 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 gBook gBook + Francisco Burzi PHP-Nuke 7.0 FINAL + Francisco Burzi PHP-Nuke 7.0 + Francisco Burzi PHP-Nuke 6.9 + Francisco Burzi PHP-Nuke 6.7 + Francisco Burzi PHP-Nuke 6.6 + Francisco Burzi PHP-Nuke 6.5 RC3 + Francisco Burzi PHP-Nuke 6.5 RC2 + Francisco Burzi PHP-Nuke 6.5 RC1 + Francisco Burzi PHP-Nuke 6.5 FINAL + Francisco Burzi PHP-Nuke 6.5 BETA 1 + Francisco Burzi PHP-Nuke 6.5 + Francisco Burzi PHP-Nuke 6.0 + Francisco Burzi PHP-Nuke 5.6 + Francisco Burzi PHP-Nuke 5.5 + Francisco Burzi PHP-Nuke 5.4 + Francisco Burzi PHP-Nuke 5.3.1 + Francisco Burzi PHP-Nuke 5.2 a + Francisco Burzi PHP-Nuke 5.2 + Francisco Burzi PHP-Nuke 5.1 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0
Not Vulnerable:

PHP-Nuke GBook Module HTML Injection Vulnerability

It has been reported that the GBook module for PHP-Nuke may be prone to a HTML injection vulnerability that may allow a remote attacker to carry out HTML injection attacks in order to steal sensitive data such as authentication credentials. Due to insufficient sanitization of user-supplied data, various parameters passed to the GBook module are vulnerable to HTML injection. Some of the affected parameters include 'name', 'email', 'city', and 'message'.

Gbook script for PHP-Nuke version 1.0 has been tested for this issue, however, it is likely that other versions of PHP-Nuke are vulnerable as well.

PHP-Nuke GBook Module HTML Injection Vulnerability

No exploit is required.

PHP-Nuke GBook Module HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP-Nuke GBook Module HTML Injection Vulnerability

References:

• PHPNuke INP Homepage (PHPNuke INP)
  
• [waraxe-2004-SA#001] - Script injection in GBook for Php-Nuke ver. 1.0 (Janek Vind )