PT-2014-8456 · C97Net · C97Net Cart Engine

Publicado 2014-10-16 · Atualizado 2014-12-16 · CVE-2014-8307

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions C97net Cart Engine versions prior to 4.0

Description The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter in the "drop down TOP menu (with path)" section or the print this page variable in the footer content block section. This can be demonstrated by manipulating the QUERY STRING to various PHP files, including "index.php", "checkout.php", "contact.php", "detail.php", "distro.php", "newsletter.php", "page.php", "profile.php", "search.php", "sitemap.php", "task.php", or "tell.php".

Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the skins/default/outline.tpl template until a patch is available. Avoid using the path parameter in the "drop down TOP menu (with path)" section and the print this page variable in the footer content block section until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-8307

Produtos afetados

C97Net Cart Engine

Referências · 4

• 🔥 http://seclists.org/fulldisclosure/2014/Sep/55 · Exploit
• 🔥 http://quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect · Exploit
• 🔥 https://exploit-db.com/exploits/34764 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8307 · Nota de Segurança