| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <008401caa805$a30fb960$010000c0@ml> Date: Sun, 7 Feb 2010 16:53:47 +0200 From: "MustLive" <mustlive@...security.com.ua> To: <bugtraq@...urityfocus.com> Subject: [Suspected Spam]Vulnerability in Tagcloud for DataLife Engine Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in Tagcloud plugin for DataLife Engine (DLE). Which I found at 07.01.2010. It is similar to XSS vulnerability in 3D Cloud for Joomla (http://websecurity.com.ua/3883/). About millions of flash files tagcloud.swf which are vulnerable to XSS attacks I mentioned in my article XSS vulnerabilities in 34 millions flash files (http://www.webappsec.org/lists/websecurity/archive/2010-01/msg00035.html). XSS: http://site/engine/classes/tagcloud/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3Ca+href='javascript:alert(document.cookie)'+style='font-size:+40pt'%3EClick%20me%3C/a%3E%3C/tags%3E Code will execute after click. It's strictly social XSS. Also it's possible to conduct HTML Injection attack, including in those flash files which have protection (in flash files or via WAF) against javascript and vbscript URI in parameter tagcloud. HTML Injection: http://site/engine/classes/tagcloud/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3Ca+href='http://websecurity.com.ua'+style='font-size:+40pt'%3EClick%20me%3C/a%3E%3C/tags%3E Vulnerable are all versions of Tagcloud plugin. I mentioned about this vulnerability at my site (http://websecurity.com.ua/3927/). Best wishes & regards, MustLive Administrator of Websecurity web site http://websecurity.com.ua
Powered by blists - more mailing lists