StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting

Exploit Database
125 阅读

作者： PaL-D3v1L

日期： 2010-01-13
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/34022/

source: https://www.securityfocus.com/bid/40310/info

Stiva SHOPPING CART is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Stiva SHOPPING CART 1.0 is vulnerable; other versions may be affected as well.

http://www.example.com/demo.php?id=18&p=1&cat=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E

last Exploits
StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting的更多信息

ProjeQtOr Project Management Tool 7.2.5 – Remote Code Execution：
SpinetiX Fusion Digital Signage 3.4.8 – Database Backup Disclosure：
eFront 3.6.14 (build 18012) – Multiple Persistent Cross-Site Scripting Vulnerabilities：
Bus Pass Management System 1.0 – ‘Search’ SQL injection：
BWL Advanced FAQ Manager 2.0.3 – Authenticated SQL Injection：
Groomify v1.0 – SQL Injection：
Simple Machines Forum (SMF) 2.0 – Session Hijacking：
DIY Web CMS – Multiple Vulnerabilities：