April 18, 2003
Snitz Forums 2000 contains an input validation error, which can be exploited by
malicious users to conduct Cross-Site Scripting attacks against other
users.
The function "ReplaceImageTags()" in "inc_func_common.asp" doesn't
validate user input in image tags properly. A malicious person can exploit this
to insert script code into an image tag by including a horizontal tab char " "
(ASCII 0x09) into the script command. Script code will be executed in the user's
browser session, when the entry is viewed.
Successful exploitation can result in disclosure of various
information (eg. cookie-based authentication information) associated with the
site running Snitz Forums 2000 or inclusion of malicious content, which the user
thinks is part of the real website.
Solution:
The vendor has suggested the following
fix:
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=43554
Article Source: Secunia
|
