Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
BID:10530
Info
Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 10530 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2004 12:00AM |
| Updated: | Jun 12 2004 12:00AM |
| Credit: | Discovery is credited to Thomas Ryan. |
| Vulnerable: |
Virtual Programming VP-ASP 5.00 Virtual Programming VP-ASP 4.50 Virtual Programming VP-ASP 4.00 |
| Not Vulnerable: | |
Discussion
Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
VP-ASP is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in a parameter of the 'shop$db.asp' script.
An attacker may be able to steal the site administrator's credentials by exploiting this issue.
VP-ASP is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in a parameter of the 'shop$db.asp' script.
An attacker may be able to steal the site administrator's credentials by exploiting this issue.
Exploit / POC
Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
Solution:
The vendor has recommended the following fix. Edit file shop$db.asp. Add the line 'rc=instr(lmsg, "=")' to the location that it appears in the following code segment:
Locate these lines
Sub CleanseMessage (msg, rc)
dim lmsg, pos
lmsg=lcase(msg)
pos=instr(lmsg, "<script>")
If pos> 0 then
rc=4
else
rc=0
rc=instr(lmsg, "=")
end if
end sub
Further information regarding this fix can be found at the following location:
http://www.vpasp.com/virtprog/info/faq_securityfixes.htm
Solution:
The vendor has recommended the following fix. Edit file shop$db.asp. Add the line 'rc=instr(lmsg, "=")' to the location that it appears in the following code segment:
Locate these lines
Sub CleanseMessage (msg, rc)
dim lmsg, pos
lmsg=lcase(msg)
pos=instr(lmsg, "<script>")
If pos> 0 then
rc=4
else
rc=0
rc=instr(lmsg, "=")
end if
end sub
Further information regarding this fix can be found at the following location:
http://www.vpasp.com/virtprog/info/faq_securityfixes.htm
References
Virtual Programming VP-ASP Shopping Cart Shop$DB.ASP Cross-Site Scripting Vulnerability
References:
References:
- June 10, 2004 - Security Fix VP-ASP 5.0 (Virtual programming)
- VP-ASP Homepage (Virtual Programming )
- VP-ASP Security FAQ (Virtual Programming)