GMTT Music Distro 1.2 XSS Exploit

2007.06.01

Credit: CorryL

Risk: Low

Local: No

Remote: Yes

CVE: CVE-2007-2916

CWE: CWE-79

CVSS Base Score: 4.3/10

Impact Subscore: 2.9/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: None

Integrity impact: Partial

Availability impact: None

-=[--------------------ADVISORY-------------------]=-
                                              
                  GMTT Music Distro      
                                               
  Author: CorryL    [corryl80 (at) gmail (dot) com [email concealed]]   
-=[-----------------------------------------------]=-

-=[+] Application:    GMTT Music Distro
-=[+] Version:        1.2
-=[+] Vendor's URL:   http://www.gmtt.co.uk/_catalog/web_stores
-=[+] Platform:       WindowsLinuxUnix
-=[+] Bug type:       Cross-Site Script
-=[+] Exploitation:   Remote
-=[-]
-=[+] Author:           CorryL  ~ corryl80[at]gmail[dot]com ~
-=[+] Reference:       http://corryl.altervista.org/
-=[+] Irc Chan:         irc.darksin.net #x0n3-h4ck

..::[ Descriprion ]::..

PHP Distro is designed to be an online record store, 
though you could use it to sell anything. The shop features: 
Paypal intergration, Admin add's product, support for cheque / postal order payments and many more.

..::[ Proof Of Concept ]::..

http://remote-server/path/showown.php?st=XSS

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

GMTT Music Distro 1.2 XSS Exploit

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.