michaeldaw.org
http://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2 CVE-2006-6919
Sage 1.3.6 - Input Validation
Record summary
CVE-2006-6919 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSage 1.3.6 - Input ValidationExploitDB exploitby pdpNot analyzed1 file
References
622809Third-party advisory
http://secunia.com/advisories/22809 20061118 Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTINGmailing list
http://www.securityfocus.com/archive/1/452010/100/0/threaded ADV-2006-4426vdb entry
http://www.vupen.com/english/advisories/2006/4426 sage-img-xss(30179)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/30179 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-6919