bugtraq - Cosmoshop - XSS on Admin-Login Mask

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201502141514.t1EFEMPH020197@sf01web2.securityfocus.com>
Date: Sat, 14 Feb 2015 15:14:22 GMT
From: innate@....de
To: bugtraq@...urityfocus.com
Subject: Cosmoshop - XSS on Admin-Login Mask

author: l0om
page: l0om.org
date: 14.02.2015

Cosmoshop is a simple webshop designed for the german market.

There is a simple XSS flaw at the admin-login panel in probably all cosmoshop versions. The admin login can be found at

http://www.shop-site.de/cgi-bin/cosmoshop/admin/index.cgi

This page will show a typical login screen. The username field is filled with the value of "u_name". Since this parameter isn't filtered you can inject javascript code and trick someone to execute it.

http://www.shop-site.de/cgi-bin/cosmoshop/admin/index.cgi?u_name=><script>alert("hello")</script>

nothing special but better to know.

Greetings and so long,
l0om