[32687] in bugtraq
Improper authentication checking in Alan Ward Acart
daemon@ATHENA.MIT.EDU (parag0d@phreaker.net)
Thu Dec 4 13:36:29 2003
Date: 4 Dec 2003 06:12:42 -0000
Message-ID: <20031204061242.23840.qmail@sf-www2-symnsj.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: <parag0d@phreaker.net>
To: bugtraq@securityfocus.com
Vulnerability: Improper authentication checking for delete
Discussion: Due to improper authentication checking a pop-up opened by any of the multiple XSS vulnerabilities by the admin of the site can cause a database compromise.
Exploit: By using one of the multiple XSS vulnerabilities in this script, an attacker can cause the site administrator to open a new window and delete products or entire categories of products from the database. The syntax is below:
www.example.com/acart2_0//admin/category.asp?catcode=1&stage=delete
Solution: The developer needs to implement a new authentication mechanism for deletion of data.
Credit: CyberArmy Application and Code Auditing Team
Parag0d
The developer was contacted regarding this matter, but never gave a reply.
