aldweb miniPortail Cross Site Scripting Vulnerability - Advisories

aldweb miniPortail Cross Site Scripting Vulnerability

Secunia Advisory:	SA9621
Release Date:	2003-08-27
Last Update:	2004-10-11

Critical:	Less critical
Impact:	Cross Site Scripting
Where:	From remote
Solution Status:	Vendor Patch

Software:	GuppY 2.x (aldweb miniPortail)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been identified in miniPortail allowing malicious people to conduct Cross Site Scripting attacks. The problem is that the "lng" parameter isn't handled correctly. This allows malicious people to inject arbitrary HTML and script code. Example: http://[some_site]/?lng=<evil_code> If a "'" is supplied in the "lng" parameter, miniPortail will return an error message revealing the relative include path. This affects version 2.3 and possibly earlier. Solution: Update to version 2.4. Provided and/or discovered by: Bahaa Naamneh Changelog: 2003-09-11: Updated "Description" section. 2004-10-11: Updated "Solution" section. Original Advisory: http://www.freeguppy.org/articles.php?lng=en&pg=4309



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

3 Related Secunia Security Advisories

1. GuppY Cross Site Scripting and Exposure of Admin Password

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Ultra Office ActiveX Control Multiple Vulnerabilities

2.	HP-UX update for Apache

3.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

4.	IBM DB2 CLR Stored Procedures Unspecified Vulnerability

5.	Tiger "genmsgidx" Insecure Temporary Files

6.	Honeyd "test.sh" Insecure Temporary Files

7.	JustSystems Ichitaro Products Unspecified Code Execution Vulnerability

8.	Red Hat Directory Server Multiple Vulnerabilities

9.	R "javareconf" Insecure Temporary Files

10.	Ampache "gather-message s.sh" Insecure Temporary Files