漏洞名稱： ATutor Input Validation Bugs in Several Scripts Permit Cross-Site Scripting Attacks
漏洞編號： ICST-CA-2005-097
漏洞說明： ATutor有數個scripts並未確實檢查使用者提供的輸入,遠端使用者可以利用惡意的URL,在受害者的系 統執行script,並藉此存取受害者的cookies,並進行XSS攻擊
底下是URL入侵範例,有些需要攻擊者具有登入權限才能奏效
http://[target]/ATutor/browse.php?cat=0&show_course=1[XSS-CODE]
http://[target]/ATutor/contact.php?subject=[XSS-CODE]
http://[target]/atutor/conten t.php?cid=323[XSS-CODE]
http://[target]/atutor/inbox/send_message.php?l=1[XSS-CODE]
http://[target]/atutor/search.php?search=10[XSS-CODE] &words=kk&include=all&fin d_in=this&display_as=pages &search=Search
http://[target]/ATutor/search.php?search=1&words=aa[XSS-CODE] &include=one&find_in=all&display_as=summaries&search=Search #search_results
http://[target]/ATutor/search.php?search=1&words=aa &include=one[XSS-CODE]&find_in=all&display_as= summaries&search=Search#search_results
http://[ target]/ATutor/search.php?search=1&words=aa &include=one&find_in=all[XSS-CODE]&display_as= summaries&search=Search#search_results
http://[target]/ATutor/search.php?s earch=1&words=aa &include=one&find_in=all&display_as=[XSS-CODE] summaries&search=Search#search_results
http://[target]/ATutor/search.php?search=1&words=aa &include= one&find_in=all&display_as=summaries&search =[XSS-CODE]Search#search_results
http://[target]/ATutor/inbox/index.php?view=1[XSS-CODE]
http://[target]/ATutor/tile.ph p?query=yy &field=technicalFormat&submit=Search[XSS-CODE]
http://[target]/ATutor/tile.php?query=[XSS-CODE] &field=technicalFormat&submit=Search
http://[target]/AT utor/tile.php?query=yy& field=technicalFormat[XSS-CODE]&submit=Search
http://[target]/ATutor/forum/subscribe_forum.php? fid=2&us=1[XSS-CODE]
http://[target]/ATuto r/directory.php?roles%5B%5D=[XSS-CODE] 1&roles%5B%5D=2&roles%5B%5D=3&status=1&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5 B%5D=[XSS-CODE ]2&roles%5B%5D=3&status=1&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5D=2&roles%5B%5D=3[XSS-CODE]&status=1&submit=Filter
http://[ta rget]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5D=2&roles%5B%5D=3&status=1[XSS-CODE]&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5 D=2&roles%5B%5D=3&status=1&submit=Filter[XSS-CODE]
http://[target]/ATutor/directory.php?roles%5B%5D=1&status= 2&reset_filter=Reset+Filter[XSS-CODE]
http://[target] /ATutor/directory.php?roles[]=1[XSS-CODE]


影響平台： Linux
Unix
Windows

影響狀況： 遠端使用者可以存取受害者的cookies,並有會進行XSS攻擊

解決方案： 目前尚無確切解決方案,詳情請見atutor.ca...

參考資料： SecurityTracker.com