Release Date: 2003-12-18
Critical: Less critical
Impact: Cross Site Scripting
Where: From remote
Software: Advanced Research SARA 4.x
Description:
Thomas M. Payerle has reported a vulnerability in SARA allowing malicious people to conduct Cross Site Scripting.
The problem is that banners from certain services aren't properly sanitised before they are printed in the administrative interface. This could be exploited to conduct Cross Site Scripting if the results are viewed in a browser through the web based administrative interface.
This has been reported to affect version 4.2.6 and 4.2.7, prior versions may also be affected.
Solution:
Version 5.0.0 is not vulnerable.
Provided and/or discovered by:
Reported by Thomas M. Payerle.
Source: Secunia