bugtraq - Addressbook v8.1.24.1 Group Name XSS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20121212074729.57fe3419c89cda66c14b77972f81dbfd.0152340028.wbe@email06.secureserver.net>
Date: Wed, 12 Dec 2012 10:15:00 -0700
From: "Kenneth F. Belva" <ken@...verbackventuresllc.com>
To: bugtraq@...urityfocus.com
Subject: Addressbook v8.1.24.1 Group Name XSS

Instructions.

After authentication, click on the Group tab at the top. Click on the
New Group Button on the group page.

For the group name (the first field) enter the following XSS test
string:

&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;

Then call the XSS string from the URL -- technically one calls the group
name -- through the group parameter as such:

http://[server]/index.php?group=%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E

I emailed the apparent author but did not receive a reply.

Ken
http://silverbackventuresllc.com