|
|
Family: CGI abuses --> Category: infos
Brooky CubeCart < 2.0.5 Vulnerability Scan
Vulnerability Scan Summary
Checks Brooky CubeCart language XSS
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP script that is prone to multiple
attacks.
Description :
The version of CubeCart on the remote host is vulnerable to a local
file include issue, along with related cross-site scripting and path
disclosure issues, due to a failure to sanitize user-supplied data.
Successful exploitation of this issue may allow a possible hacker to execute
arbitrary code on the remote host, to read arbitrary files from it, to
inject arbitrary HTML or script code through the affected application
and into a user's browser, or to learn the full installation path of
the application.
See also :
http://archives.neohapsis.com/archives/bugtraq/2005-02/0157.html
http://www.cubecart.com/site/forums/index.php?showtopic=5741
Solution:
Upgrade to Cubecart version 2.0.5 or higher.
Threat Level:
Medium / CVSS Base Score : 6
(AV:R/AC:H/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
