| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 29 Apr 2004 21:09:06 -0000 From: Alvin Alex <alvin_gboy@...mail.com> To: bugtraq@...urityfocus.com Subject: SquirrelMail Cross Scripting Attacks.... SquirrelMail latest version (although is tested on version 1.4.2) is prone to many cross scripting attacks that can be used to steal user cookies.The Exploit lies in the way squirrel mail represents the folder names and shows them.To make the matters worse.No extra unique variable added to the url for each user therefore it is easy for the attacker to just pass the url in mail and steal the session cookie. Some of the exploit are at : http://victim.com/mail/src/compose.php?mailbox=INBOX which can be replaced as follows http://victim.com/mail/src/compose.php?mailbox="><script>malacious script</script> Example: http://victim.com/mail/src/compose.php?mailbox="><script>window.alert(document.cookie)</script> ------------------------------------------------------------------------- Squirrel Mail Coders have been informed of this vulnerability but the vulnerability still exists in their latest version. ------------------------------------------------------------------------- Please Let me know if i am wrong anywhere... Regards, Alvin
Powered by blists - more mailing lists