RWAuction Pro Search.ASP Cross-Site Scripting Vulnerability

Bugtraq ID:	15740
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 06 2005 12:00AM
Updated:	Apr 07 2006 04:28PM
Credit:	r0t is credited with the discovery of this vulnerability.
Vulnerable:	Rainworx rwAuction Pro 4.0 IISWorks ASP KnowledgeBase 2.0
Not Vulnerable:

RWAuction Pro Search.ASP Cross-Site Scripting Vulnerability


The 'rwAuction Pro' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 4.0 is vulnerable; prior versions may also be affected.

RWAuction Pro Search.ASP Cross-Site Scripting Vulnerability

No exploit is required.

An example URI has been provided:

http://www.example.com/search.asp?searchtxt=[XSS]

RWAuction Pro Search.ASP Cross-Site Scripting Vulnerability

Solution:
The vendor has released a patch to address this issue. Please contact the vendor for further information on obtaining fixes.

RWAuction Pro Search.ASP Cross-Site Scripting Vulnerability

References:

• ASP KnowledgeBase Web Site (IISWorks)
  
• IISWorks ASP KnowledgeBase 2.x XSS vuln. (r0t)
  
• Rainworx Web Site (Rainworx)
  
• rwAuction Pro v4.0 XSS vuln. (r0t)