###########################################################################<br># Advisory #5 Title: SimpBook "message" Remote Cross-Site Scripting Vulnerability<br># <br># <br># Author: 0o_zeus_o0<br># Contact: <a href="mailto:zeus@diosdelared.com">
zeus@diosdelared.com</a><br># Website: <a href="http://Elitemexico.org">Elitemexico.org</a><br># Date: 05/01/2006<br># Risk: High <br># Vendor Url: <a href="http://codegrrl.com/scripts/simpbook/">http://codegrrl.com/scripts/simpbook/
</a><br># Affected Software: SimpBook<br># Non Affected: <br># <br># We Are: olimpus klan team <br>#<br>#TECHNICAL INFO<br>#================================================================<br>#<br>#An input validation vulnerability in SimpBook has been reported, which can be exploited
<br>#<br>#by remote users to conduct cross-site scripting attacks.<br>#<br>#User-supplied input passed to the "message" field isn't sanitised before being stored in<br>#<br>#the guestbook. This can be exploited to execute arbitrary script code in the security context
<br>#<br>#of an affected website, as a result the code will be able to access any of the target user's<br>#<br>#cookies, access data recently submitted by the target user via web form to the site, or take<br>#<br>#actions on the site acting as the target user.
<br>#<br>#Successful exploitation requires that "html_enable" is set to "on" in "config.php".<br>#<br>#This is set to"on" in the default installation.<br>#<br>#Solution:<br>#<br>#Set "html_enable" to "off" in "
config.php" or edit the source code to ensure that input is properly sanitised.<br>#<br>#<br>#VULNERABLE VERSIONS<br>#================================================================<br>#SimpBook version 1.0. Other versions may also be affected.
<br>#<br>#<br>#================================================================<br>#Contact information<br>#0o_zeus_o0<br>#zeus@<a href="http://diosdelared.com">diosdelared.com</a><br>#www.olimpusklan.org<br>#================================================================
<br>#greetz: lady fire, fraude, xoxo, El_Mesias<br>##############################################################################<br><br>