Overview
X-Cart versions 5.1.6 through 5.1.10 are vulnerable to cross-site scripting (XSS), and versions 5.1.10 and below are vulnerable to authorization bypass.
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - CVE-2015-0950 X-Cart versions 5.1.6 through 5.1.10 contain a reflected cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script via the query string parameter substring in admin.php. |
Impact
A remote, unauthenticated attacker may be able to execute arbitrary script in the context of the end-user's browser session. A remote, authenticated attacker may be able to obtain or remove data associated with other users' accounts. |
Solution
Apply an update |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| Temporal | 4.8 | E:POC/RL:OF/RC:UR |
| Environmental | 3.6 | CDP:N/TD:M/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to Yasser Ali for reporting this vulnerability.
This document was written by Joel Land.
Other Information
| CVE IDs: | CVE-2015-0950, CVE-2015-0951 |
| Date Public: | 2015-04-02 |
| Date First Published: | 2015-04-02 |
| Date Last Updated: | 2015-04-02 15:47 UTC |
| Document Revision: | 13 |