Zen Cart多个跨站脚本攻击漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1193314 漏洞类型 跨站脚本
发布时间 2006-10-03 更新时间 2006-10-16
CVE编号 CVE-2006-5119 CNNVD-ID CNNVD-200610-039
漏洞平台 N/A CVSS评分 4.0
|漏洞来源
https://cxsecurity.com/issue/WLB-2006100033
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200610-039
|漏洞详情
ZenCart1.3.5中的多个跨站脚本攻击漏洞。远程攻击者可以通过(a)admin/login.php中的(1)admin_name或(2)admin_pass参数,或(b)admin/password_forgotten.php中的(3)admin_email参数注入任意Web脚本或HTML。
|漏洞EXP
Armorize Technologies Security Advisory

Advisory No:

Armorize-ADV-2006-0003

Date:

2006/9/27

Summary:

Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a foundation of OScommerce GPL code. It provides an easy-to-setup and run online store.

Affected Software:

Zen Cart 1.3.5

Vulnerability Description:

Cross-Site Scripting

Analysis/Impact:

Privacy leakages from the client-side may lead to session hijacking, identity theft and information theft.

Detection/Exploit(partial):

http://www.example.com/[PATH]/login.php

http://www.example.com/[PATH]/password_forgotten.php

Protection/Solution:

1. Escape every questionable URI and HTML script.

2. Remove prohibited user input.

Credit: Security Team at Armorize Technologies, Inc. (security (at) armorize (dot) com [email concealed])

Additional Information:

Link to this Armorize advisory

http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0002

Links to all Armorize advisories

http://www.armorize.com/advisory/

Links to Armorize vulnerability database

http://www.armorize.com/resources/vulnerability.php

Armorize Technologies is a software security company focused on Web application security. Our source code analysis tools provide Web application security that transcends firewalls, intrusion detection systems (IDSs), and all other signature-based security devices. Armorize's main product, CodeSecure, uses award-winning and patent-pending source code verification technology to identify vulnerabilities in Web applications during the earliest stage of the software development lifecycle.

Papers on source code analysis technology from our founding team have won awards at two consecutive International World Wide Web Conferences. The latest version of CodeSecure addresses current market gaps in Web security products by helping Web developers detect vulnerabilities and choose from rapidly generated solutions. The company is headquartered in Santa Clara, California with its R&D center in Taipei, Taiwan. Find out more at http://www.armorize.com. Find out more at http://www.armorize.com.
|参考资料

来源:www.zen-cart.com
链接:http://www.zen-cart.com/forum/showthread.php?t=47526
来源:www.zen-cart.com
链接:http://www.zen-cart.com/forum/showthread.php?p=270823#post270823
来源:BID
名称:20242
链接:http://www.securityfocus.com/bid/20242
来源:BUGTRAQ
名称:20060928MultipleXSSVulnerabilitiesinZenCart1.3.5
链接:http://www.securityfocus.com/archive/1/archive/1/447286/100/0/threaded
来源:VUPEN
名称:ADV-2006-3849
链接:http://www.frsirt.com/english/advisories/2006/3849
来源:MISC
链接:http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003
来源:SECUNIA
名称:22118
链接:http://secunia.com/advisories/22118
来源:XF
名称:zencart-multiple-xss(29248)
链接:http://xforce.iss.net/xforce/xfdb/29248
来源:SREASON
名称:1667
链接:http://securityreason.com/securityalert/1667