Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Web :: e-commerce, shopping carts :: hack2073.htm

Comersus Shopping Cart http response splitting hole
ADVISORY: http response splitting hole in Comersus shopping cart

Author: Maestro (me!)
Date: 01-SEP-04
Vendor: Comersus ( 
Product: Comersus Shopping Cart 5.0991
Problem: Http response splitting (web cache poisoning, xss, 
yadayadayada) - sponse.pdf



(replace curly braces with lessthan and greaterthan)

Vendor status: vendor was contacted (attempt) several times over the 
last two weeks, by their bug report form, and by emal to support. No 
response so far. 

Find what you are looking for with the Lycos Yellow Pages ult.asp?SRC=lycos10

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH