URL XSS in Easy Banner Free
Summary
- Vulnerability
- URL XSS in Easy Banner Free
- Discovered
- 2010.11.16
- Last Update
- n/a n/a
- ID
- EV0148
- CVE
- n/a
- Risk Level
- low
- Type
- Cross Site Scripting
- Status
- Patched. Vendor has updated Easy Banner Free.
- Vendor
- PHP Web Scripts (http://phpwebscripts.com/)
- Vulnerable Software
- Easy Banner Free
- Version
- 2009.05.18
- PoC/Exploit
- Available
- Solution
- Available
- Discovered by
- Aliaksandr Hartsuyeu (eVuln.com)
Description
Cross Site Scripting found in Easy Banner Free script.
- URL XSS
- Site URL and Banner URL are not properly sanitized against Cross Site Scripting attacks. Vulnerable script: index.php. Parameters siteurl and urlbanner may contain XSS code.
PoC/Exploit
Site URL XSS
Script index.php checks only if "http://" is present at the beginning of siteurl parameter.
Site URL XSS example: http://"><script>alert(XSS)</script><aa aa="
Banner URL XSS
Script index.php checks only if some image file extension is present at the end of urlbanner parameter.
Banner URL XSS example: "><script>alert(XSS)</script><aa aa=".gif
Condition.
magic_quotes_gpc = off
Solution.
Easy Banner Free updated.
PHP Web Scripts notified us that Easy Banner Free is updated. Download latest version from vendor's website.