Exploit Keene Digital Media Server 1.0.2 - Cross-Site Scripting

[Exploiter]

EDB-ID

24573

Проверка EDB

1. Пройдено

Автор

DR_INSANE

Тип уязвимости

WEBAPPS

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2004-09-04

Keene Digital Media Server 1.0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/11111/info

Keene Digital Media Server is prone to multiple cross-site scripting vulnerabilities. These issues span multiple scripts. The source of the problem is that affected scripts do not sufficiently sanitize externally supplied data before rendering it to a client user. An attacker may exploit these issues by enticing a victim user to follow a malicious link.

These issues could be exploited to steal cookie-based authentication credentials or launch other attacks.

http://www.example.com/dms/slideshow.kspx?shidx=0&idx=-1&sort=d&style=t&delay=15&playmode=play&source=[code]
http://www.example.com/dms/slideshow.kspx?source=[code]
http://www.example.com/dms/dlasx.kspx?shidx=[code]
http://www.example.com/igen/?pg=dlasx.kspx&shidx=[code]
http://www.example.com/dms/mediashowplay.kspx?pic=[code]&idx=0
http://www.example.com/dms/mediashowplay.kspx?pic=0&idx=[code]