Info

Last Modified

7 months ago

Percent Complete

90%

Disclosure

Sep 28, 2006

Discovery

Unknown

Dates

Exploit

Sep 28, 2006

Solution

Unknown

Description

ASPPlayground.NET contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'calendarID' variable upon submission to the 'calendar.asp' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
OSVDB: Web Related

Technical

The vendor has replied that exploitation is more difficult than originally disclosed: "I'd like to inform you that the software throws an exception when an invalid calendarID was received and therefore the possibility of XSS exploit is very low. User gets an error message when it happens, and therefore, no actual damage has been reported. I have since released an updated file that
provides better error handling and thus XSS exploits using this technique
becomes impossible."

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, ASPPlayground.NET has released a patch to address this vulnerability.