Exploit W-Agora 4.2 - BBCode Script Injection

[Exploiter]

EDB-ID

27783

Проверка EDB

1. Пройдено

Автор

R0XES

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-2228

Дата публикации

2006-04-29

source: https://www.securityfocus.com/bid/17751/info

W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. 

W-Agora can be configured to send all user information in session data; if this is the case, then attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing an attacker to steal cookie-based authentication credentials. Other attacks are also possible. 

This issue is reported to affect version 4.20; other versions may also be vulnerable.

[code]<b onMouseOver =eval(&#039;alert(/xss/)&#039;)>hi</b>

[/CODE]