BlackBoard Inc Blackboard calendar.pl Multiple Variable XSS

2004-04-11T00:00:00
ID OSVDB:5156
Type osvdb
Reporter DarC KonQuesT(DarC_KonQuesT@phreaker.net)
Modified 2004-04-11T00:00:00

Description

Vulnerability Description

Blackboard contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate multiple variables upon submission to the "calendar.pl" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

Blackboard contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate multiple variables upon submission to the "calendar.pl" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Manual Testing Notes

http://[victim]/bin/common/calendar.pl?course_name=%22%3E%3Cscript%3Ealert('Vulnerable')%3C/script%3E

http://[victim]/bin/common/calendar.pl?courseID=%22%3E%3Cscript%3Ealert('Vulnerable')%3C/script%3E

http://[victim]/bin/common/calendar.pl?subroutine=%22%3E%3Cscript%3Ealert('Vulnerable')%3C/script%3E

References:

Vendor URL: http://www.blackboard.com Secunia Advisory ID:11355 Related OSVDB ID: 5154 Related OSVDB ID: 5155