Forum

osCommerce αρκετές Cross-Site Scripting τρύπες - Από {gr}

osCommerce αρκετές Cross-Site Scripting τρύπες

http://www.oscommerce.com/

Παραδείγματα:

http://www.example.com/catalog/admin/banner_manager.php?page=1[XSS-code]
http://www.example.com/catalog/admin/banner_statistics.php?page=1[XSS-code]
http://www.example.com/catalog/admin/countries.php?page=1[XSS-code]
http://www.example.com/catalog/admin/currencies.php?page=1[XSS-code]
http://www.example.com/catalog/admin/languages.php?page=1[XSS-code]
http://www.example.com/catalog/admin/manufacturers.php?page=1[XSS-code]
http://www.example.com/catalog/admin/newsletters.php?page=1[XSS-code]
http://www.example.com/catalog/admin/orders_status.php?page=1[XSS-code]
http://www.example.com/catalog/admin/products_attributes.php?page=1[XSS-code]
http://www.example.com/catalog/admin/products_expected.php?page=1[XSS-code]
http://www.example.com/catalog/admin/reviews.php?page=1[XSS-code]
http://www.example.com/catalog/admin/specials.php?page=1[XSS-code]
http://www.example.com/catalog/admin/stats_products_purchased.php?page=1[XSS-code]
http://www.example.com/catalog/admin/stats_products_viewed.php?page=1[XSS-code]
http://www.example.com/catalog/admin/tax_classes.php?page=1[XSS-code]
http://www.example.com/catalog/admin/tax_rates.php?page=1[XSS-code]
http://www.example.com/catalog/admin/zones.php?page=1[XSS-code]
http://www.example.com/catalog/admin/categories.php?action=new_product_preview&read=only&pID=12&origin=stats_products_viewed.php?page=2[XSS-code]

http://www.securityfocus.com/bid/20343/exploit





http://www.oscommerce.com/