Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

[Full-Disclosure] phpkit suffers (realy stupid) XSS vuln.

Subject: [Full-Disclosure] phpkit suffers (realy stupid) XSS vuln.
Date: Tue, 30 Mar 2004 22:26:19 +0200
Software: phpkit
Version: 1.6.03 others are probably affected as well.
Status: Vendor has been notified weeks ago but refuses to answer or take any 
actions.
phpkit[1] is a simple German cms / portal software written in php similar to 
phpbb / phpnuke and is quite popular in Germany. All session information is 
stored in cookies - thus a attacker can easily steal session data or hashed 
passwords.

The forum part has _no_ protection against JavaScript, Object or Java 
injections - all html-tags appear in the victim's browser.

Proof-of-concept code
That's odd - <script... ;)

The source also seems to be vulnerably to SQL-injections - good luck ;)

Workaround: 
Don't use this software. These guys do not seem to know what they are doing.

Keep smiling
yanosz

[1]http://www.phpkit.de


<Prev in Thread] Current Thread [Next in Thread>
  • [Full-Disclosure] phpkit suffers (realy stupid) XSS vuln., Yanosz <=