| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 30 Jul 2013 12:08:10 GMT
From: vulns@...nach.com
To: bugtraq@...urityfocus.com
Subject: MojoPortal XSS
Class Stored Cross-Site Scripting
Remote Yes
Credit Michael Savage of Dionach (vulns@...nach.com)
Vulnerable MojoPortal 2.3.9.7
MojoPortal is prone to a stored cross-site scripting vulnerability because it
does not escape the titles of forum threads when inserting into the page title
element.
An attacker may leverage this issue to run JavaScript in the context of another
user's browser.
MojoPortal 2.3.9.7 is known to be vulnerable. Other versions may also be
vulnerable.
To exploit this issue, an attacker must create a crafted post, for example:
POST /Forums/EditPost.aspx [txtSubject=+</title><script>alert("XSS!")</script>]
The vendor has released an updated version (2.3.9.8) which is believed to
resolve this issue. See the announcement at
https://www.mojoportal.com/mojoportal-2398-released
Powered by blists - more mailing lists