webcrawler.com - Cross site scripting vulnerability

----------------------------------------------

Type: Cross site scripting

Date: June, 13th 2006

----------------------------------------------

Credits:

----------------------------------------------

Discovered by: David "Aesthetico" Vieira-Kurz

http://www.majorsecurity.de

----------------------------------------------

Vulnerability:

----------------------------------------------

I found a bug in the search-engine of Webcrawler("http://webcrawler.com").

It is vulnerable for cross site scripting.

Sending a malicious code will result a code working on the page that pops up...

http://msxml.webcrawler.com/info.wbcrwl/search/web/[XSS CODE HERE]

This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Example:

----------------------------------------------

/info.wbcrwl/search/web/<script>alert("MajorSecurity")</script>

Screenshots:

----------------------------------------------

http://majorsecurity.de/advisory/webcrawler_bug/webcrawler1.JPG

http://majorsecurity.de/advisory/webcrawler_bug/webcrawler2.JPG

[ reply ]