Exploit Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
20890
Проверка EDB
  1. Пройдено
Автор
EDVICE SECURITY SERVICES
Тип уязвимости
REMOTE
Платформа
MULTIPLE
CVE
cve-2001-0519
Дата публикации
2001-05-29
Код:
source: https://www.securityfocus.com/bid/2800/info

eSafe Gateway is a security utility used for filtering internet content.

It is possible to craft an html file that slips through eSafe Gateway's script filtering feature. eSafe Gateway will ignore scripting commands that are embedded in any html tags that allow it. This causes eSafe Gateway to generate filtered html that still includes potentially dangerous scripting functions. 

For example, the following potentially harmful script will go
undetected by eSafe, even if the "remove all scripts" option is enabled:


<A HREF="javascript:var fso = new
ActiveXObject('Scripting.FileSystemObject');var a =
fso.CreateTextFile('c:\\testfile2.txt', true);a.WriteLine('This is a
test.');a.Close();">Click here</A>

HREF is not the only tag ignored. Any tag capable of containing scripting
command will not be filtered by eSafe. For example:

<BODY onload="alert('hi');">
 
Источник
www.exploit-db.com

Похожие темы