TUCoPS :: Web :: e-commerce, shopping carts

TUCoPS :: Web :: e-commerce, shopping carts :: bx3043.htm
Maian Cart v1.1 XSS Vulnerabilities

Maian Cart v1.1 XSS Vulnerabilities Maian Cart v1.1 XSS Vulnerabilities


----------------------------------------------------------------=0D
Script : Maian Cart v1.1=0D
Type : XSS Vulnerabilities=0D
----------------------------------------------------------------=0D
Discovered by : =7FKhashayar Fereidani Or Dr.Crash=0D
Our Team : IRCRASH=0D
----------------------------------------------------------------=0D
Our Site : Http://IRCRASH.COM=0D 
IRCRASH Bugtraq : Http://BUGTRAQ.IRCRASH.COM=0D 
----------------------------------------------------------------=0D
IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr=0D
----------------------------------------------------------------=0D
Script Download : http://www.maianscriptworld.co.uk/free-php-scripts.html=0D 
----------------------------------------------------------------=0D
XSS 1 : http://Example/admin/inc/header.php?msg_adminheader==0D 
XSS 2 : http://Example/admin/inc/header.php?msg_adminheader2==0D 
XSS 3 : http://Example/admin/inc/header.php?msg_adminheader3==0D 
XSS 4 : http://Example/admin/inc/header.php?msg_adminheader4==0D 
Many Variable have Xss Vuln In header.php=0D
Xss 5 : http://Example/admin/inc/footer.php?msg_script3==0D 
Many Variable have Xss Vuln In footer.php=0D
Xss 6 : http://Example/maian/cart/index.php?cmd=search&keywords=&x=0&y=0=0D 
----------------------------------------------------------------=0D
Solution : Edit Source Code And Filter Variable With htmlspecialchar() function .......=0D
----------------------------------------------------------------=0D
TNx : God......=0D
Khashayar Fereidani Email : irancrash[at]gmail[dot]com=0D
----------------------------------------------------------------