GeeCarts Multiple Input Validation Vulnerabilities
BID:28470
Info
GeeCarts Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 28470 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1622 CVE-2008-1621 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 26 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | Ivan Sanchez |
| Vulnerable: |
GeeCarts GeeCarts 0 |
| Not Vulnerable: | |
Discussion
GeeCarts Multiple Input Validation Vulnerabilities
GeeCarts is prone to multiple input-validation vulnerabilities, including remote file-include and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site; other attacks are also possible.
All versions of GeeCarts are reported vulnerable.
GeeCarts is prone to multiple input-validation vulnerabilities, including remote file-include and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site; other attacks are also possible.
All versions of GeeCarts are reported vulnerable.
Exploit / POC
GeeCarts Multiple Input Validation Vulnerabilities
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/show.php?id=[XSS or RFI]
http://www.example.com/search.php?id=[XSS or RFI]
http://www.example.com/view.php?id=[XSS or RFI]
http://www.example.com/morefuncionts?id=[XSS or RFI]
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/show.php?id=[XSS or RFI]
http://www.example.com/search.php?id=[XSS or RFI]
http://www.example.com/view.php?id=[XSS or RFI]
http://www.example.com/morefuncionts?id=[XSS or RFI]
Solution / Fix
GeeCarts Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].