Secunia Logo
 
WebCit Multiple Vulnerabilities
Secunia Advisory: SA26090
Release Date: 2007-07-16
Last Update: 2007-07-19
Popularity: 5,507 views

Critical:
Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status: Vendor Patch

Software:WebCit 7.x

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-3821
CVE-2007-3822


Description:
Christopher Schwardt has reported multiple vulnerabilities in WebCit, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site request forgery and cross-site scripting attacks.

1) WebCit allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can be exploited to e.g. modify certain settings or create new rooms, tasks, and responses by enticing a user to visit a malicious site.

2) Input passed via entries in the "calendar" or "bulletin board" mode, the room name, the filename of uploaded files, and preferences is not properly sanitised before being used. This can be exploited to insert arbitrary HTML- and script code, which is executed in a user's browser session in context of an affected site when the malicious data is viewed.

Successful exploitation requires user credentials, but can potentially be exploited in combination with vulnerability #1.

3) Input passed to the "who" parameter when showing users is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML- and script code in a user's browser session in context of an affected site.

The vulnerabilities are reported in versions prior 7.11.

Solution:
Update to version 7.11.

Provided and/or discovered by:
Christopher Schwardt

Changelog:
2007-07-19: Added CVE reference.


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 11
New vulnerabilities: 65
Updated advisories: 15

Less // 45 views
Ubuntu update for nfs-utils
Moderately // 49 views
Debian update for clamav
Moderately // 94 views
Red Hat update for ruby
Moderately // 96 views
SUSE update for kernel

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Sun Java JDK / JRE Multiple Vulnerabilities // 291 views
2. My Simple Forum "action" Local File Inclusion Vulnerability // 94 views
3. Red Hat update for java-1.5.0-sun / java-1.6.0-sun // 91 views
4. Adobe Flash Player Multiple Security Issues and Vulnerabilities // 90 views
5. BNCwi "newlanguage" File Inclusion Vulnerability // 79 views
6. SUSE update for kernel // 70 views
7. Red Hat update for ruby // 69 views
8. Nagios Unspecified CGI Vulnerability // 53 views
9. Linux Kernel PARISC "parisc_show_stack()" Denial of Service // 47 views
10. PHP ZipArchive::extractTo() Directory Traversal Vulnerability // 43 views