Release Date: 2003-12-28
Critical:
Moderately critical
Impact: Cross Site Scripting
Manipulation of data
Exposure of system information
Exposure of sensitive information
Where: From remote
Software: OpenBB 1.x
Description:
gr00vy has reported a vulnerability in OpenBB, which can be exploited by malicious people to conduct Cross-Site Scripting attacks.
The vulnerability is caused due to missing validation of input supplied to the "FID" parameter in "board.php". This can be exploited to execute arbitrary HTML or script code in a user's browser session when viewed.
Example:
http://[vulnerable_system]/board.php?FID=
The vulnerability has been reported in version 1.06. Other versions may also be affected.
Reportedly, it may potentially also be possible to manipulate the SQL query via an SQL injection attack.
Solution:
Filter malicious characters and character sequences in a HTTP proxy or firewall with URL filtering capabilities.
Edit the source code to ensure that user input is properly sanitised before being used.
Provided and/or discovered by:
gr00vy
Source: Secunia