bugtraq - PassMasterFlex (and PassMasterFlex+) XSS injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060506125612.18340.qmail@securityfocus.com>
Date: 6 May 2006 12:56:12 -0000
From: zerogue@...il.com
To: bugtraq@...urityfocus.com
Subject: PassMasterFlex (and PassMasterFlex+) XSS injection

PassMasterFlex (and PassMasterFlex+) XSS injection

Discovered by: Nomenumbra
Date: 5/4/2006
impact:moderate (privilege escalation,possible defacement)

PassMasterFlex(+) is a database-driven multiple login that utilizes cookies for authentication.
PassMasterFlex+ was written not only to provide an alternative to the Apache login but in 
response to numerous requests to have multiple users.

PMF doesn't filter any data in the user's profiles, thus allowing them to embed any XSS code there
to elevate their privileges.
Also upon failed login attempt, data gets written to the "hack-log" but without filtering. It is
possible to embed XSS in a custom user-agent to obtain cookies.

Nomenumbra/[0x4F4C]