CuteNews 1.3 - Comment HTML Injection

🗓️ 19 Jul 2004 00:00:00Reported by DarkBichoType

CuteNews 1.3 has an HTML injection vulnerability due to poor input sanitization in comments.

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2004-0660	13 Jul 200404:00	–	cve
Cvelist	CVE-2004-0660	13 Jul 200404:00	–	cvelist
Exploit DB	CuteNews 0.88/1.3 - 'example1.php' Cross-Site Scripting	28 Jun 200400:00	–	exploitdb
Exploit DB	CuteNews 0.88/1.3 - 'example2.php' Cross-Site Scripting	28 Jun 200400:00	–	exploitdb
Exploit DB	CuteNews 0.88/1.3 - 'show_archives.php' Cross-Site Scripting	28 Jun 200400:00	–	exploitdb
Exploit DB	CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting	16 Jul 200400:00	–	exploitdb
EUVD	EUVD-2004-0659	7 Oct 202500:30	–	euvd
NVD	CVE-2004-0660	6 Aug 200404:00	–	nvd
OpenVAS	CuteNews show_news.php XSS	3 Nov 200500:00	–	openvas
OpenVAS	CuteNews 'show_news.php' XSS Vulnerability	3 Nov 200500:00	–	openvas

source: https://www.securityfocus.com/bid/10750/info

CutePHP is reported prone to an HTML injection vulnerability.

The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML code.

An attacker can exploit this vulnerability by adding HTML code within URI arguments. The hostile code may be rendered in the user's browser when the user views the entry.

Exploitation could permit an attacker to steal cookie-based authentication credentials or launch other attacks.

http://www.example.com/show_news.php?subaction=addcomment&name=UserName&comments=http://www.example.com&id=1078525267||1090074219|UserName|none|127.0.0.1|<script>alert("example");</script>||

21 Jan 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

EPSS0.03947