Info

Disclosure

Dec 06, 2004

Discovery

Nov 12, 2004

Dates

Exploit

Unknown

Solution

Unknown

Description

Ansel contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the album name variable upon submission to the gallery script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Upgrade to version 2.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Federico David Sacerdoti

Ansel

2.1

References

Security Tracker: 1012434
Bugtraq ID: 11824
Related OSVDB ID: 12236
Secunia Advisory ID: 12856
CVE ID: 2004-2267 (see also: NVD)
Vendor URL: http://freshmeat.net/projects/ansel/
Other Advisory URL: http://secunia.com/secunia_research/2004-17/advisory/

Credit

Secunia Security Advisories - sec-advsecunia.com - Secunia

Direct URL: http://osvdb.org/12237