bugtraq - Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080728231540.04ae02b8@mobile.fabian.datensalat.eu>
Date: Mon, 28 Jul 2008 23:15:40 +0200
From: Fabian Fingerle <fabian@...ensalat.eu>
To: bugtraq@...urityfocus.com
Subject: Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3100
http://owl.sourceforge.net/
http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html

Description:
Owl is a multi user document repository (knowledgebase) system for
publishing files/documents onto the web. The application is vulnerable
to simple Cross Site Scripting, which can be used for several isues

Example:
Assuming Owl is installed on http://localhost/Owl/, one can inject
JavaScript with:
http://localhost/Owl/register.php?myaction=getpasswd&username="><script>alert(1);</script>

Workaround/Fix:
Replace your owl.lib.php with the version from
http://owl.cvs.sourceforge.net/*checkout*/owl/owl-0.90/lib/owl.lib.php

Disclosure Timeline:
2008-07-27 Vendor contacted
2008-07-28 Vendor: fixed issue in cvs / no need for new stable release
2008-07-28 Advisory published

CVE Information:
The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2008-3100 to this issue. This is a candidate for inclusion in
the CVE list (http://cve.mitre.org/), which standardizes names for
security problems. 

Credits and copyright:
This vulnerability was discovered by Fabian Fingerle (published with
help from Hanno Boeck (http://www.hboeck.de)). It's licensed under the
creative commons attribution license 3.0.

Fabian Fingerle, 2008-07-28, http://www.fabian-fingerle.de

-- 
_GPG_ 3D17 CAC8 1955 1908 65ED  5C51 FDA3 6A09 AB41 AB85
_chaos events near stuttgart_ www.datensalat.eu

Download attachment "signature.asc" of type "application/pgp-signature" (198 bytes)