Chyrp HTML-injection Vulnerability

vendor:

Chyrp

by:

SecurityFocus

7,5

CVSS

HIGH

HTML-injection

CWE

Product Name: Chyrp

Affected Version From: Chyrp 2.1.2

Affected Version To: Chyrp 2.1.2

Patch Exists: N/A

Related CWE: N/A

CPE: a:chyrp:chyrp

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2012

Chyrp HTML-injection Vulnerability

Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to generate HTML or script code in web pages. Additionally, the application should use an 'escape' mechanism to neutralize such input before it is displayed in the browser.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/52117/info

Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Chyrp 2.1.2 is vulnerable; other versions may also be affected. 

<form action="http://[host]/includes/error.php" method="post">
<input type="hidden" name="ajax" value="1" />
<input type="hidden" name="body" value='<script>alert(document.cookie);</script>' />
<input type="submit" id="btn"> 
</form>