owl-xss.txt

`Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100  
  
References:  
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3100  
http://owl.sourceforge.net/  
http://www.datensalat.eu/~fabian/cve/CVE-2008-3100-Owl.html  
  
  
Description:  
Owl is a multi user document repository (knowledgebase) system for  
publishing files/documents onto the web. The application is vulnerable  
to simple Cross Site Scripting, which can be used for several isues  
  
Example:  
Assuming Owl is installed on http://localhost/Owl/, one can inject  
JavaScript with:  
http://localhost/Owl/register.php?myaction=getpasswd&username="><script>alert(1);</script>  
  
Workaround/Fix:  
Replace your owl.lib.php with the version from  
http://owl.cvs.sourceforge.net/*checkout*/owl/owl-0.90/lib/owl.lib.php  
  
Disclosure Timeline:  
2008-07-27 Vendor contacted  
2008-07-28 Vendor: fixed issue in cvs / no need for new stable release  
2008-07-28 Advisory published  
  
CVE Information:  
The Common Vulnerabilities and Exposures (CVE) project has assigned the  
name CVE-2008-3100 to this issue. This is a candidate for inclusion in  
the CVE list (http://cve.mitre.org/), which standardizes names for  
security problems.   
  
Credits and copyright:  
This vulnerability was discovered by Fabian Fingerle (published with  
help from Hanno Boeck (http://www.hboeck.de)). It's licensed under the  
creative commons attribution license 3.0.  
  
Fabian Fingerle, 2008-07-28, http://www.fabian-fingerle.de  
  
--   
_GPG_ 3D17 CAC8 1955 1908 65ED 5C51 FDA3 6A09 AB41 AB85  
_chaos events near stuttgart_ www.datensalat.eu  
`