Secunia

Doz has reported a vulnerability and a security issue in WebBatch, which can be exploited by malicious people to disclose system information or conduct cross-site scripting attacks.

1) Input passed via the URL to webbatch.exe is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Version 2007D is not affected by this vulnerability.

2) Calling webbatch.exe with the "dumpinputdata" parameter can be exploited to disclose certain system information.

Solution
Filter malicious characters and character sequences using a proxy or a firewall.

Provided and/or discovered by
Doz, hackerscenter.com

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area