OneWorldStore OWListProduct.ASP Cross-Site Scripting Vulnerability

Bugtraq ID:	13185
Class:	Input Validation Error
CVE:	CVE-2005-1162
Remote:	Yes
Local:	No
Published:	Apr 14 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	dcrab <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	OneWorldStore OneWorldStore
Not Vulnerable:

OneWorldStore OWListProduct.ASP Cross-Site Scripting Vulnerability

OneWorldStore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

OneWorldStore OWListProduct.ASP Cross-Site Scripting Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com/owListProduct.asp?bSub='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&idCategory=64

OneWorldStore OWListProduct.ASP Cross-Site Scripting Vulnerability

Solution:
The vendor has addressed this issue in the latest release of the application. Please see the referenced vendor advisory on obtaining and applying updates.


OneWorldStore OneWorldStore

• OneWorldStore OneWorldStore Current
  http://oneworldstore.com/support_updates.asp

OneWorldStore OWListProduct.ASP Cross-Site Scripting Vulnerability

References:

• OneWorldStore Homepage (OneWorldStore)
  
• OneWorldStore Security Advisories (OneWorldStore)
  
• Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore (dcrab )