PT-2007-1549 · Ashop · Ashop Deluxe+1
Published
2007-01-04
·
Updated
2018-10-16
·
CVE-2007-0056
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ASHop Deluxe version 4.5
ASHop Administration Panel version 4.5
Description
The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the
cat parameter to "/ashop/catalogue.php" and "/ashop/basket.php", the exp parameter to "/ashop/catalogue.php", the searchstring parameter to "/ashop/search.php", the checkout and action parameters to "/ashop/shipping.php", the cat parameter to "/cart-path/admin/editcatalogue.php", and the resultpage parameter to "/cart-path/admin/salesadmin.php".Recommendations
For AShop Deluxe version 4.5, update the software to a version that fixes the XSS vulnerabilities.
For AShop Administration Panel version 4.5, update the software to a version that fixes the XSS vulnerabilities.
As a temporary workaround, consider restricting access to the affected API endpoints, such as "/ashop/catalogue.php", "/ashop/basket.php", "/ashop/search.php", "/ashop/shipping.php", "/cart-path/admin/editcatalogue.php", and "/cart-path/admin/salesadmin.php", until a patch is available.
Avoid using the parameters
cat, exp, searchstring, checkout, action, and resultpage in the affected API endpoints until the issue is resolved.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ashop Administration Panel
Ashop Deluxe