|
vBulletin Image Script Insertion Vulnerability
|
|
|
|
|
Secunia Advisory:
|
SA17359
|
|
|
Release Date:
|
2005-11-03
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Cross Site Scripting
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | vBulletin 2.x
vBulletin 3.x
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
Tatercrispies has reported a vulnerability in vBulletin, which can be exploited by malicious people to conduct script insertion attacks.
The vulnerability is caused due to an input validation error in the image upload handling. This can exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site by uploading a specially crafted valid image containing embedded HTML and script code.
This is related to:
SA17295
Successful exploitation requires that the malicious image is accessed directly in the Microsoft Internet Explorer browser (i.e. not referenced via an image tag).
It has also been reported by the vendor that certain input isn't properly verified due to a vulnerability in PHP.
For more information:
SA17371
The vulnerability has been reported in versions 3.5.0, 3.0.6 through 3.0.9, and 2.3.4 through 2.3.7. Prior versions may also be affected.
Solution:
Update to version 3.5.1, 3.0.10, or 2.3.8, or apply patch.
http://www.vbulletin.com/forum/showthread.php?t=161721
Provided and/or discovered by:
Tatercrispies
Other References:
SA17295:
http://secunia.com/advisories/17295/
SA17371:
http://secunia.com/advisories/17371/
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
18 Related Secunia Security Advisories, displaying 10
|
|
|
1. vBulletin Script Insertion Vulnerabilities
|
|
2. vBulletin "Attached Before" and "Attached After" SQL Injection
|
|
3. vBulletin "postids" SQL Injection Vulnerability
|
|
4. vBulletin "Attachment Manager" Cross-Site Scripting
|
|
5. vBulletin "prefs" / "navprefs" Cross-Site Scripting Vulnerabilities
|
|
6. vBulletin Cross-Site Scripting and Script Insertion
|
|
7. vBulletin User Email Address Script Insertion Vulnerability
|
|
8. vBulletin "Add Reminder" Script Insertion Vulnerability
|
|
9. vBulletin Multiple Vulnerabilities
|
|
10. vBulletin BBCode IMG Tag Cross-Site Request Forgery
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
