FreznoShop Search Script Cross-Site Scripting Vulnerability

Bugtraq ID:	9359
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 04 2004 12:00AM
Updated:	Jan 04 2004 12:00AM
Credit:	Discovery is credited to David S. Ferreira.
Vulnerable:	FreznoShop FreznoShop 1.3 .0 RC1 FreznoShop FreznoShop 1.2.3
Not Vulnerable:	FreznoShop FreznoShop 1.3 .0 RC2

FreznoShop Search Script Cross-Site Scripting Vulnerability

FreznoShop is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to the software that include hostile HTML and script code. If such a link was followed by a victim user, the attacker-supplied code would be rendered in the security context of the site hosting the software.

This could be exploited to steal cookie-based authentication credentials. Other attacks are also possible.

FreznoShop Search Script Cross-Site Scripting Vulnerability

The following example was provided:

http://www.example.com/shop/search.php?search=%3Cscript%3Ealert(document.domain);%3C/script%3E

FreznoShop Search Script Cross-Site Scripting Vulnerability

Solution:
This issue has been addressed in FreznoShop 1.3.0 RC2.

FreznoShop Search Script Cross-Site Scripting Vulnerability

References:

• 1.3.0 RC2 Release Notes (FreznoShop)
  
• FreznoShop Homepage (FreznoShop)