AlstraSoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities

ID EDB-ID:25328
Type exploitdb
Reporter Dcrab
Modified 2005-04-01T00:00:00


AlstraSoft EPay Pro 2.0 Multiple Cross-Site Scripting Vulnerabilities. CVE- 2005-0981. Webapps exploit for php platform


It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities.

These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters.

This issue may allow for theft of cookie-based authentication credentials or other attacks.

EPay Pro version 2.0 is vulnerable to these issues."><script>alert(document.cookie)</script>&send=first&send=regular&send=priority&send=express
Pops cookie'%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Pops cookie