Lucene search
K

AsaanCart 0.9 Cross Site Scripting

🗓️ 14 Sep 2012 00:00:00Reported by HTTPCSType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 18 Views

A vulnerability in AsaanCart 0.9 allows cross-site scripting attacks via the 'category_name' parameter in '/category.php' leading to execution of arbitrary HTML and script code in user's browser session

Code
`HTTPCS Advisory : HTTPCS97  
Product : AsaanCart  
Version : 0.9  
Date : 2012-09-13  
Criticality level : Less Critical  
Description : A vulnerability has been discovered in AsaanCart, which can be  
exploited by malicious people to conduct cross-site scripting attacks. Input  
passed via the 'category_name' parameter to '/category.php' is not properly  
sanitised before being returned to the user. This can be exploited to execute  
arbitrary HTML and script code in a user's browser session in context of an  
affected site.  
Page : /category.php  
Variables : category_id=6947&category_name=[VulnHTTPCS]  
Type : XSS  
Method : GET  
Solution :  
References : https://www.httpcs.com/advisory/httpcs97  
Credit : HTTPCS [Web Vulnerability Scanner]  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Sep 2012 00:00Current
7.4High risk
Vulners AI Score7.4
18