4nAlbum nmimage.php script allows cross-site scripting
| 4nalbum-nmimagephp-xss (15497) |  Medium Risk |
Description:
4nAlbum is vulnerable to cross-site scripting. A remote attacker could embed malicious script in the ?z parameter in a specially-crafted URL request to the nmimage.php script to steal the victim's session and cookie-based authentication credentials.
Platforms Affected:
- Open Source, 4nAlbum 0.92
Remedy:
No remedy available as of March 2004.
Consequences:
Gain Access
References:
- BugTraq Mailing List, Mon Mar 15 2004 - 12:40:52 CST , [waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke] at http://archives.neohapsis.com/archives/bugtraq/2004-03/0142.html.
- Warp-Speed.de Web site, Warp-Speed.de at http://www.warp-speed.de/.
- BID-9881: WarpSpeed 4nAlbum Module For PHPNuke Multiple Vulnerabilities
- CVE-2004-1818: Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.
- OSVDB ID: 4293: 4nAlbum nmimage.php z Variable XSS
- SA11134: 4nAlbum Multiple Vulnerabilities
Reported:
Mar 15, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net