OXID eShop 'getRecommSearch()' Function Cross Site Scripting Vulnerability

Bugtraq ID:	62901
Class:	Input Validation Error
CVE:	CVE-2013-5913
Remote:	Yes
Local:	No
Published:	Oct 08 2013 12:00AM
Updated:	Oct 08 2013 12:00AM
Credit:	Adrian Märtins of SysEleven GmbH
Vulnerable:	OXID eSales AG OXID eShop Professional 4.7.7 OXID eSales AG OXID eShop Professional 4.3 OXID eSales AG OXID eShop Professional 4.1.2 OXID eSales AG OXID eShop Professional 4.1.1 OXID eSales AG OXID eShop Professional 4.1 OXID eSales AG OXID eShop Professional 4.2.0 OXID eSales AG OXID eShop Professional 4.1.6 OXID eSales AG OXID eShop Professional 4.1.5 OXID eSales AG OXID eShop Professional 4.1.4 OXID eSales AG OXID eShop Professional 4.1.3 OXID eSales AG OXID eShop Enterprise 5.0.7 OXID eSales AG OXID eShop Enterprise 4.3 OXID eSales AG OXID eShop Enterprise 4.2 OXID eSales AG OXID eShop Enterprise 4.1.6 OXID eSales AG OXID eShop Enterprise 4.1.5 OXID eSales AG OXID eShop Enterprise 4.1.4 OXID eSales AG OXID eShop Enterprise 4.1.3 OXID eSales AG OXID eShop Enterprise 4.1.2 OXID eSales AG OXID eShop Enterprise 4.1.1 OXID eSales AG OXID eShop Enterprise 4.1.0 OXID eSales AG OXID eShop Community 4.7.7 OXID eSales AG OXID eShop Community 4.3 OXID eSales AG OXID eShop Community 4.2 OXID eSales AG OXID eShop Community 4.1.6 OXID eSales AG OXID eShop Community 4.1.5 OXID eSales AG OXID eShop Community 4.1.4 OXID eSales AG OXID eShop Community 4.1 OXID eSales AG OXID eShop Community 4.1.3 OXID eSales AG OXID eShop Community 4.1.2 OXID eSales AG OXID eShop Community 4.1.1
Not Vulnerable:	OXID eSales AG OXID eShop Professional 4.7.8 OXID eSales AG OXID eShop Enterprise 5.0.8 OXID eSales AG OXID eShop Community 4.7.8

OXID eShop 'getRecommSearch()' Function Cross Site Scripting Vulnerability

OXID eShop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue is fixed in OXID eShop 4.7.8 and 5.0.8.

OXID eShop 'getRecommSearch()' Function Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

OXID eShop 'getRecommSearch()' Function Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OXID eShop 'getRecommSearch()' Function Cross Site Scripting Vulnerability

References:

• OXID eShop Homepage (OXID eSales AG)
  
• Security bulletins/2013-001 (OXID eSales AG)