Aurora Nutritive Analysis Module Multiple XSS

2009.03.28
Credit: Bugs NotHugs
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

- Aurora Nutritive Analysis Module Multiple XSS - Description "Aurora's FoodPro is a total food production, planning and control system that provides start-to-finish control from raw food through production, service, and analysis. It provides historical, as well as current and projected data, in terms of food usage, costs, operating margins, and service." Aurora's FoodPro has a 'Nutritive Analysis Module' that provides the capability to analyze ingredients, recipes, and menus by nutritive components. Two scripts in this module suffer from cross-site scripting vulnerabilities that can be exploited without authentication. The 'nutframe.asp' and 'Menusamp.asp' scripts do not sanitize input supplied to the 'locationName' variable. - Product Aurora Information Systems, Nutritive Analysis Module, unknown version - PoC http://[site]/FoodPro/nutframe.asp?sName=Hi&locationNum=10&locationName=%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%27%68%69%27%29%3B%3C%2F%73%63%72%69%70%74%3E&naFlag=1 http://[site]/foodpro/Menusamp.asp?sName=Hi&locationNum=07&locationName=%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%27%68%69%27%29%3B%3C%2F%73%63%72%69%70%74%3E&naFlag=1 - Solution None - Timeline 2008-06-06: Vulnerability Discovered 2008-07-07: Disclosed to Vendor (no ack) 2008-10-05: Mail re-sent to Vendor (no ack) 2009-03-26: Disclosed to Public (no more playing nice)

References:

http://seclists.org/bugtraq/2009/Mar/0249.html


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top