Search

imei Addmimistrator’s BugBlog

imei’s security Advisories and researches

——–Summary——–
Software: CuteNews
Sowtware’s Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
——-Description——-
There is a security bug in CuteNews version 1.4.1 that
allows malicious people to conduct an XSS attack.
This bug is the result of poor checking of user input
(Quotations and
< &>
) which are passed to the “show” parameter.
An attacker may use this issue to execute malicious code in a user’s browser
session in context of the affected site.This may facilitate the theft of
cookie-based authentication credentials as well as other attacks.
The following is the partition of the code which is assumed to
cause this issue:
inc/show.inc.php
{174} <input type=\”hidden\” name=\”show\” value=\”$show\” />

——-Exploit——-
/cutenews/show_news.php?subaction=addcomment
&id={aNewsId}&name={anExistantUserName}
&show=%22%3E%3Cscript%3Ealert(”imei”)%3C/script%3E

——-Solution——-
No Solution is Available
——-Credit——-
Discovered by: imei addmimistrator
addmimistrator(4}gmail(O}com
www.myimei.com
myimei.com/security

16 Responses to “CuteNews1.4.1~ AddCommentForProtectedUserNames~ XSS Attack”

    http://secunia.com/advisories/18981/

    Mmmm… Site looks good! Real good!;-)

    OoO! Nice site! I juuust LOVE it! Found it rather interesting and useful, you know:)

    your welcome all. thanx about all.

    Gut Seite! Sehr gut! Danke schoen fuer Information!

    Ooo.! Gut Seite:) Sehr schoen!

    Hi there! Nice site you have:) I wish you good luck!

    Hi.. mmm.. good site! nice work) thanks for information i found useful:)

    Ehmm..m. Sehr gut Seite! Ich sage innig..!:)

    OoOo!)) Nice site you\’ve got! Good luck!

    Great site you have! Nice stucture, easy to browse! thaks for useful info:)

    Gut! Sehr schoen seite! ^^ Wirklich! :)

    Ho trovato questo luogo abbastanza informativo - per ringraziarlo: -)

    Maledizione! Ché buon luogo! Sto andando dirgli i miei amici! O_o

    .
    .
    .
    it is a quote
    .
    .
    .

Something to say?

You must be logged in to post a comment.