X-Cart Cross Site Scripting and Authorization Bypass Vulnerabilities
BID:73703
Info
X-Cart Cross Site Scripting and Authorization Bypass Vulnerabilities
| Bugtraq ID: | 73703 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0951 CVE-2015-0950 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 02 2015 12:00AM |
| Updated: | Apr 02 2015 12:00AM |
| Credit: | Yasser Ali |
| Vulnerable: |
X-Cart X-Cart 5.1.10 X-Cart X-Cart 5.1.9 X-Cart X-Cart 5.1.8 X-Cart X-Cart 5.1.7 X-Cart X-Cart 5.1.6 |
| Not Vulnerable: |
X-Cart X-Cart 5.1.11 |
Exploit / POC
X-Cart Cross Site Scripting and Authorization Bypass Vulnerabilities
An attacker can use a browser to exploit these issues. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
An attacker can use a browser to exploit these issues. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
References
X-Cart Cross Site Scripting and Authorization Bypass Vulnerabilities
References:
References:
- X-Cart Homepage (X-Cart)
- Vulnerability Note VU#924124 (KB CERT)
- X-Cart 5.1.11: major security update, upgrade your stores ASAP (x-cart)