1ndonesian Security Team (1st) http://bosen.net/releases/ ============================================================================= Security Advisory Advisory Name: Auction Works XXS Vulnerability Release Date: 07/15/2003 Application: Current/Running Platform: Win32 Severity: Medium BUG Type: XXS Author: Bosen <mobileat_private> Discover by: Bosen <mobileat_private> Vendor Status: See below. Vendor URL: www.auctionworks.com Reference: http://bosen.net/releases/ Overview: From the web, Just click the vendor URL or http://www.auctionworks.com/products.asp Author comments, Becoz this site host many stores, im sure information of any kind, very important. Details: sfError.asp which is supposed to handle error messages, seems unfiltered agains Cross-Site Scripting. Which is allow any attacked to inject XSS script. Exploits/POC: https://[url]/store/sfError.asp?sfid=20212&reason=<script>alert('1st')</script> Vendor Response: Contacted. Recommendation: Filter the script. 1ndonesian Security Team (1st) Advisory: http://bosen.net/releases/ About 1ndonesian Security Team: 1ndonesian Security Team, research and develop intelligent, advanced application security assessment. Based in Indonesia, 1ndonesian Security Team offers best of breed security consulting services, specialising in application, host and network security assessments. 1st provides security information and patches for use by the entire 1st community. This information is provided freely to all interested parties and may be redistributed provided that it is not altered in any way, 1st is appropriately credited and the document retains.
This archive was generated by hypermail 2b30 : Wed Jul 16 2003 - 14:44:57 PDT