CONTROLzx HMS multiple scripts cross-site scripting
| controlzshms-multiple-scripts-xss (25491) |  Medium Risk |
Description:
CONTROLzx HMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the dedicated_order.php, shared_order.php, /customers/server_management.php and /customers/forgotpass.php scripts. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site, allowing the attacker to steal the victim's cookie-based authentication credentials.
Consequences:
Gain Access
Remedy:
Upgrade to the latest version of CONTROLzx HMS (3.3.8 or later), available from the CONTROLzx HMS Web site. See References.
References:
- CONTROLzx HMS Web site: CONTROLzx HMS. Linux web hosting control panel and billing solution..
- UNSECURED SYSTEMS 27 march 2006: CONTROLzx HMS - Hosting Management System vuln..
- BID-17282: CONTROLzx HMS Multiple Cross-Site Scripting Vulnerabilities
- CVE-2006-1430: Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php.
- OSVDB ID: 24173: CONTROLzx HMS forgotpass.php email Field XSS
- OSVDB ID: 24174: CONTROLzx HMS shared_order.php sharedPlanID Variable XSS
- OSVDB ID: 24175: CONTROLzx HMS dedicated_order.php dedicatedPlanID Variable XSS
- OSVDB ID: 24176: CONTROLzx HMS server_management.php plan_id Variable XSS
- SA19432: CONTROLzx HMS Multiple Cross-Site Scripting Vulnerabilities
- VUPEN/ADV-2006-1131: CONTROLzx HMS Multiple Parameter Handling Cross Site Scripting Vulnerabilities
Platforms Affected:
- DRZES CONTROLzx HMS 3.3.4
Reported:
Mar 27, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net