full-disclosure - Arcade Trade Script XSS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1f9bad3a0905251203ib8df5c7g3774953653eecd9b@mail.gmail.com>
Date: Mon, 25 May 2009 20:03:33 +0100
From: SmOk3 <smok3f00@...il.com>
To: vuldb@...urityfocus.com, Vuln@...irt.com, Vuln@...tik.com, 
	vuln@...unia.com, SecurityTracker <help@...uritytracker.com>,
	bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: Arcade Trade Script XSS

Original advisory: http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss/

Arcade Trade Script is a full arcade site CMS (Content Management
System) with easy customization and advanced traffic trading system
built in. With ATS you will hardly ever have to FTP anything. Almost
all files, pages, and meta tags can be edited from the admin panel.
ATS is extremely easy to use and works for both regular arcades and
full blown traffic trading arcades. - taken from Arcade Trade Script
vendor website.

This awesome script (version 1.0 beta) has a XSS vulnerability in one
of it’s variables, this attack could be used to grab peoples cookies
or to launch denial of service attacks.

PoC:
index.php?a=gamelist&q=[XSS]&submit=GO

The vendor was really fast, about a couple of hours, to patch it after
I mailed him so just upgrade to a new version to have it fixed.
It’s always nice to see an admin who cares and answer positively to a
possible security threat.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/