+----------------------+ | XSS in MyMarket 1.71 | +----------------------+ Product Description =================== MyMarket is a fully functional online shopping catalog system, built using PHP and MySQL. It was created by Ying Zhang for the purpose of teaching people about the basics of creating an E-Commerce site. It can be found at http://mymarket.sourceforge.net/ Vulnerable systems ================== MyMarket 1.71 Exploit ======= http://[traget]/templates/form_header.php?noticemsg=<Scr*ipt>javascript:aler t(document.cookie)</Scr*ipt> (without "*") Solution ======== put this two lines at the begin of form_header.php ---- form_header.php ----- <? $noticemsg = HTMLSpecialChars($noticemsg); $errormsg = HTMLSpecialChars($errormsg); ... -------------------------- Vendor response =============== I submitted this a week ago, the vendor didn't response yet. ------------------------------ Tim Vandermeersch qber66@pandora.be http://users.pandora.be/tim/
