2z Project Rating.PHP Cross Site Scripting Vulnerability

TITLE: 2z Project Rating.PHP Cross Site Scripting Vulnerability
CLASS: Input Validation Error
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: May 23 2007 12:00AM
UPDATE: May 24 2007 03:57PM
CREDIT: Janek Vind is credited with discovering this issue.
VULNERABLE:

2z Project 2z Project 0.9.5
NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

2z Project is prone to a cross-site scripting vulnerability.

This vulnerability potentially allows an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

Version 0.9.5 is reported vulnerable; other versions may also be affected.

Exploit

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

The following proof-of-concept URI is available:

http://www.example.com/2zcms/?category=none&altname=testnews&rating=xxx

Solution

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:vuldb@securityfocus.com.

References

References:

PhpLog

BNLug Benevento Linux Users Group