ACP3 index.php and download.php cross-site scripting
| acp3-index-download-xss (34110) |  Medium Risk |
Description:
ACP3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the index.php and download.php scripts. A remote attacker could exploit this vulnerability using various parameters in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Platforms Affected:
- ACP3, ACP3 4.0b3 and prior
Remedy:
No remedy available as of August 30, 2008.
Consequences:
Gain Access
References:
- ACP3 Web site, ACP3 at http://acp3.goratsch-webdesign.de/pages/list/id_19/. (Web site is in German)
- BugTraq Mailing List, Sat May 05 2007 - 11:50:06 CDT , ACP3 (v4.0b3) - Multiple Vulnerabilities at http://archives.neohapsis.com/archives/bugtraq/2007-05/0060.html.
- BID-23834: ACP3 Multiple Input Validation Vulnerabilities
- CVE-2007-2578: Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to Cookie Manipulation, via the form[search_term] parameter.
- CVE-2007-2579: Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or (3) form[search_term] parameter to search/list/action_search/index.php; (4) the id parameter to modules/dl/download.php; (5) the form[cat] parameter to news/list/index.php; the (6) form[cat], (7) form[name], or (8) form[message] parameter to certain news/details/id_*/action_create/index.php files; or (9) the form[mail] parameter to newsletter/create/index.php.
- OSVDB ID: 36188: ACP3 contact/contact/index.php form[mail] Variable XSS
- OSVDB ID: 36189: ACP3 search/list/action_search/index.php Multiple Variable XSS
- OSVDB ID: 36190: ACP3 modules/dl/download.php id Variable XSS
- OSVDB ID: 36191: ACP3 news/list/index.php form[cat] Variable XSS
- OSVDB ID: 36192: ACP3 news/details/id_*/action_create/index.php Multiple Variable XSS
- OSVDB ID: 36193: ACP3 newsletter/create/index.php form[mail] Variable XSS
Reported:
May 05, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net