exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Libero Cross Site Scripting

Libero Cross Site Scripting
Posted Feb 23, 2009
Authored by Oliver Greiter | Site senseofsecurity.com.au

Libero version 5.3 SP5 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2009-0540
SHA-256 | 45fa5e80ef17455ab47ee63066b1fc648b12b085d0454f936f2990173d3ea75e

Libero Cross Site Scripting

Change Mirror Download
Libero Cross-Site Scripting Vulnerability - Security Advisory - SOS-09-001

Release Date. 23-Feb-2009
Vendor Notification Date. 20-Oct-2008
Product. Libero
Platform. Windows (verified), possibly others
Affected versions. Libero v5.3 SP5 (verified), possibly others
Severity Rating. Medium
Impact. Cookie/credential theft, impersonation, loss of confidentiality
Attack Vector. Remote
Solution Status. Vendor patch not yet available
CVE reference. CVE-2009-0540

Details.
Libero is a library management system. During an application penetration test Sense of Security identified a cross-site scripting vulnerability in the search feature of the Libero web application. This occurred as a result of the application not properly filtering HTML tags which allowed malicious Javascript to be embedded. When input is incorrectly validated and not properly sanitised and then displayed in a web page, attackers can trick users into viewing the web page and causing malicious code to be executed.

Proof of Concept.
You can test the susceptibility of your system to this issue by entering the following string into the search term form field and clicking 'search'.
<script>alert(document.cookie)</script>
A vulnerable site will return the users' session ID.

Solution.
The vendor has advised that the fix will be made available in Libero v5.5 SP1.
A fix will not be made available for previous versions.

Discovered by.
Oliver Greiter from SOS Labs.

About us.
Sense of Security is a leading provider of IT security and risk management solutions. Our team has expert skills in assessment and assurance, strategy and architecture, and deployment through to ongoing management. We are Australia's premier application security consultancy and trusted IT security advisor to many of the countries largest organisations.

Sense of Security Pty Ltd
Level 3, 66 King St
Sydney NSW 2000
AUSTRALIA

T: +61 (0)2 9290 4444
F: +61 (0)2 9290 4455
W: http://www.senseofsecurity.com
E: info@senseofsecurity.com
Login or Register to add favorites

File Archive:

June 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    0 Files
  • 2
    Jun 2nd
    0 Files
  • 3
    Jun 3rd
    18 Files
  • 4
    Jun 4th
    21 Files
  • 5
    Jun 5th
    0 Files
  • 6
    Jun 6th
    57 Files
  • 7
    Jun 7th
    6 Files
  • 8
    Jun 8th
    0 Files
  • 9
    Jun 9th
    0 Files
  • 10
    Jun 10th
    12 Files
  • 11
    Jun 11th
    27 Files
  • 12
    Jun 12th
    38 Files
  • 13
    Jun 13th
    16 Files
  • 14
    Jun 14th
    14 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close