1ndonesian Security Team (1st)
http://bosen.net/releases/

Security Advisory

Advisory Name: Auction Works XXS Vulnerability
Release Date: 07/15/2003
Application: Current/Running
Platform: Win32
Severity: Medium
BUG Type: XXS
Author: Bosen <[email protected]>
Discover by: Bosen <[email protected]>
Vendor Status: See below.
Vendor URL: www.auctionworks.com
Reference: http://bosen.net/releases/

Overview:
>From the web,
Just click the vendor URL or
http://www.auctionworks.com/products.asp
Author comments,
Becoz this site host many stores, im sure information of any kind,
very important.

Details:
sfError.asp which is supposed to handle error messages, seems unfiltered
agains Cross-Site Scripting. Which is allow any attacked to inject XSS
script.

Exploits/POC:
https://[url]/store/sfError.asp?sfid=20212&reason=<script>alert('1st')</script>

Vendor Response:
Contacted.

Recommendation:
Filter the script.

1ndonesian Security Team (1st) Advisory:
http://bosen.net/releases/

About 1ndonesian Security Team:
1ndonesian Security Team, research and develop intelligent, advanced application
security assessment. Based in Indonesia, 1ndonesian Security Team offers best of
breed security consulting services, specialising in application, host and network
security assessments.

1st provides security information and patches for use by the entire 1st community.

This information is provided freely to all interested parties and may be
redistributed provided that it is not altered in any way, 1st is appropriately
credited and the document retains.