Geeklog 1.3.5 - Multiple Cross-Site Scripting Vulnerabilities

Author: Ahmet Sabri ALPER
type: webapps
platform: php
port: nan
date_added: 2002-06-10 
date_updated: 2012-09-26 
verified: 1 
codes: CVE-2002-0962;OSVDB-8074;OSVDB-8073 
tags: 
aliases:  
screenshot_url:  
application_url:

source: https://www.securityfocus.com/bid/4969/info

Geeklog does not filter script code from URL parameters, making it prone to cross-site scripting attacks. Attacker-supplied script code may be included in a malicious link to the 'index.php' or 'comment.php' script. Such a malicious link might be included in a HTML e-mail or on a malicious webpage.

This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a host running Geeklog.

This issue has been reported to exist in Geeklog 1.3.5, earlier versions may also be susceptible to this issue.

/index.php?topic=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
/comment.php?mode=display&sid=foo&pid=18&title=&lt;script&gt;alert(document.cookie)&lt;/script&gt;&type=article