paBox pabox.php posticon Parameter XSS

medium Nessus Plugin ID 17336

Synopsis

The remote web server contains a PHP script that is prone to a cross- site scripting attack.

Description

The remote host is running paBox, a web application written in PHP.

The remote version of paBox installed on the remote host does not properly sanitize input supplied through the 'posticon' parameter used to select a 'smilie' for a post. By exploiting this flaw, an attacker can inject HTML and script code into the browser of users who view the affected post, potentially stealing authentication cookies and controlling how the affected application is rendered.

Solution

Unknown at this time.

See Also

https://www.securityfocus.com/archive/1/393156

Plugin Details

Severity: Medium

ID: 17336

File Name: pabox_post_icon_xss.nasl

Version: 1.18

Type: remote

Published: 3/16/2005

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 3/14/2005

Reference Information

BID: 12796

CWE: 20, 442, 629, 711, 712, 722, 725, 74, 750, 751, 79, 800, 801, 809, 811, 864, 900, 928, 931, 990