CVE-2005-1782

Vulnerability

BookReview beta 1.0 contains multiple cross-site scripting (XSS) vulnerabilities. The application fails to validate user-supplied input in several parameters across multiple scripts. Affected parameters include node in add_review.htm, suggest_review.htm, suggest_category.htm, add_booklist.htm, and add_url.htm; isbn in add_review.htm, add_contents.htm, and add_classification.htm; chapters in add_contents.htm; user in contact.htm; and submit[string] in search.htm. All files are accessed via index.php with the page parameter or directly via the .htm files [1].

Exploitation

An attacker can exploit these vulnerabilities by crafting a malicious URL containing injected script code in any of the vulnerable parameters. No authentication is required; the attacker only needs to trick a victim into clicking the crafted link. For example, a URL like http://[victim]/add_review.htm?isbn=0801052319&node= will execute arbitrary JavaScript in the victim's browser [1].

Impact

Successful exploitation allows remote attackers to execute arbitrary web script or HTML in the context of the victim's browser. This can lead to session hijacking, cookie theft, defacement, or other malicious actions, resulting in a loss of integrity and confidentiality [1].

Mitigation

No official fix or patch was available at the time of disclosure (May 2005). The vendor was notified but no solution was provided. Users are advised to disable or restrict access to the application until a patch is released. The application's availability to the public is unclear [1].