Secunia

Various vulnerabilities have been reported in MapInfo Discovery, allowing malicious people to obtain sensitive information, conduct cross-site scripting attacks and bypass security authentication.

1) Unspecified sensitive information is stored in the "mi3errors.log" log file.

Example:
http://[victim]/midiscovery/ErrLog/mi3errors.log

2) User input passed to the "mapname" parameter in "MapFrame.asp" isn't sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site by tricking the user into visiting a malicious website or follow a specially crafted link.

3) MapInfo Discovery fails to restrict malicious people from logging in without authenticating. This can be exploited to login with administrative privileges by changing the "ps" parameter in the "MapPassword.asp" script.

The vulnerabilities reportedly affect MapInfo Discovery 1.0 and 1.1.

Solution
Use another product.

Provided and/or discovered by
Discovered by an anonymous person and reported through iDEFENSE.

Original Advisory
http://www.idefense.com/application/poi/display?id=122&type=vulnerabilities

Deep Links
Links available in Customer Area