Exploit PHP-Nuke Splatt Forum 4.0 Module - HTML Injection

[Exploiter]

EDB-ID

22558

Проверка EDB

1. Пройдено

Автор

MORNING WOOD

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2003-05-01

source: https://www.securityfocus.com/bid/7484/info

A problem with Splatt Forum could allow remote users to execute arbitrary code in the context of the web site running the Splatt Forum module. The problem occurs due to the lack of sanitization performed on character representations of HTML tags.

As a result, a malicious user may be able to submit a post to the vulnerable site containing embedded script code. This code would be executed by a user's browser in the context of the site.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the website running the vulnerable software. The attacker may hijack the session of the legitimate by using cookie-based authentication credentials. Other attacks are also possible.

It should be noted that although this vulnerability has been reported to affect Splatt Forum version 4.0, previous versions may also be affected. 

#
Typical text here <script>alert(document.cookie);</script> additional text here.
#