AOH :: HP Unsorted T :: BX2201.HTM

TorrentTrader Classic v1.08 XSS nd CSRF



Cross-site Scripting and CSRF in TorrentTrader Classic v1.08
Cross-site Scripting and CSRF in TorrentTrader Classic v1.08



Cross-site Scripting and CSRF in TorrentTrader Classic v1.08

Application: TorrentTrader Classic v1.08, possible other versions.

Vendor URL: 
http://sourceforge.net/project/showfiles.php?group_id=98584&package_id=1809271. 

1. Input passed to the msg property of account-inbox.php is not properly
sanitized before being displayed to the user. A malicious authenticated user
can execute arbitrary HTML and scripting code in a user's browser session in
context of an affected web site.
Example:
http://[host]/account-inbox.php?msg=&receiver= 

2. The application allows users to perform certain actions via HTTP requests
without performing any validity checks to verify the request.  A malicious
person can perform a CSRF attack.
Example:
http://[host]/account-inbox.php?msg=&receiver= 

Vulnerability #1 was discovered by Dominus.
Original URL: http://www.securitylab.ru/vulnerability/347887.php 

BR,
Valery Marchuk
www.SecurityLab.ru 



The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.