W-Agora 4.2 - BBCode Script Injection
Author: r0xes
type: webapps
platform: php
port: 0
date_added: 2006-04-29
date_updated: 2013-08-22
verified: 1
codes: CVE-2006-2228;OSVDB-25295
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/17751/info
W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content.
W-Agora can be configured to send all user information in session data; if this is the case, then attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing an attacker to steal cookie-based authentication credentials. Other attacks are also possible.
This issue is reported to affect version 4.20; other versions may also be vulnerable.
[code]<b onMouseOver =eval('alert(/xss/)')>hi</b>[/code]