Alan Ward A-Cart MSG Cross-Site Scripting Vulnerability

Bugtraq ID:	8722
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 29 2003 12:00AM
Updated:	Sep 29 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to G00db0y <[email protected]>.
Vulnerable:	Alan Ward A-Cart PRO 2.0 Alan Ward A-Cart 2.0
Not Vulnerable:

Alan Ward A-Cart MSG Cross-Site Scripting Vulnerability

A-Cart has been reported prone to a cross-site scripting vulnerability. The issue presents itself likely due to a lack of sufficient sanitization performed on data contained in the 'msg' URI parameter that is passed to signin.asp.

An attacker could exploit this condition to render arbitrary HTML in the browser of a victim, stealing cookie authentication credentials or performing other nefarious acts.

Alan Ward A-Cart MSG Cross-Site Scripting Vulnerability

The following proof of concept has been supplied:
http://www.example.com/acartpath/signin.asp?msg=<script>alert('Zone-h')</script>

Alan Ward A-Cart MSG Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alan Ward A-Cart MSG Cross-Site Scripting Vulnerability

References:

• A-Cart Homepage (Alan Ward)
  
• XSS Vulnerabilities in Alan Ward Acart ()