CandyPress™ Store XSS vuln.

Monday, 21 May 2007

Vuln. discovered by : r0t
Date: 18 May 2007
Vendor: http://www.candypress.com/
Affected versions: v3.5.2.14 and prior

CandyPress™ Store contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "brand" and "Msg" parameter in "scripts/prodList.asp" isn't properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Solution:
Edit the source code to ensure that input is properly sanitised.

Original Article:
http://pridels-team.blogspot.com/2007/05/candypress-store-xss-vuln.html