|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> General >> osCommerce Malformed Session ID XSS Vulnerability Vulnerability Assessment Details
|
osCommerce Malformed Session ID XSS Vulnerability |
||
Detect osCommerce Malformed Session ID XSS Detailed Explanation for this Vulnerability Assessment osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installation permits store owners to setup, run, and maintain their online stores with minimum effort and with absolutely no costs or license fees involved. osCommerce is vulnerable to a XSS flaw. The flaw can be exploited when a malicious user passes a malformed session ID to URI. Solution : This is the response from the developer. To fix the issue, the $_sid parameter needs to be wrapped around tep_output_string() in the tep_href_link() function defined in includes/functions/html_output.php. Before: if (isset($_sid)) { $link .= $separator . $_sid } After: if (isset($_sid)) { $link .= $separator . tep_output_string($_sid) } osCommerce 2.2 Milestone 3 will redirect the user to the index page when a malformed session ID is used, so that a new session ID can be generated. Network Security Threat Level: Medium Networks Security ID: 9238 Vulnerability Assessment Copyright: This script is Copyright (C) 2003 Noam Rathaus |
||
Cables, Connectors |
MITS Altair 8800 Computer Bamboo Reproduction Arduino Tested Working Assembled
$649.99
MITS ALTAIR 8800 Original Vintage Microcomputer
$6000.00
MITS ALTAIR 8800 Original Vintage Microcomputer S-100 Buy It Now $5999
$5999.00
Bare S100 CPU Replacement for ALTAIR 8800 IMSAI 8080 JAIR Single Board Computer
$42.00
MITS ALTAIR 8800 88-2SIO S-100 Reproduction Board
$35.00
Altair MITS 8800 CPU Parts Kit not IMSAI 8080 S100 (board NOT included)
$64.95
MITS ALTAIR 8800 Original Vintage Microcomputer with 14 boards - Buy It Now
$9500.00
$22.50
HyperWorks 2020 Suite for PC (Tool For Engineering Design, Simulation) 50Gb
$72.87
Vintage Altair 8088 CPU Wire Wrapped S100 Card w Mon EPROM circuit board #T71
$99.00
|
||
No Discussions have been posted on this vulnerability. |