CVE-2004-2411

VP-ASP Shopping Cart 4.0-5.0 - Cross-Site Scripting via IMG Tag in cat or msg Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2411. PoCs published by Thomas Ryan.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in VP-ASP's 'shoperror.asp' script due to improper sanitization of user-supplied input in the 'msg' parameter. The PoC includes URLs that trigger XSS via injected JavaScript and meta refresh tags.

Description

The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use <script> tags, as demonstrated via javascript in IMG tags to (1) the cat parameter in shopdisplayproducts.asp or (2) the msg parameter in shoperror.asp, and possibly other vectors.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Thomas Ryan · textwebappsasp

https://www.exploit-db.com/exploits/24198

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in VP-ASP's 'shoperror.asp' script due to improper sanitization of user-supplied input in the 'msg' parameter. The PoC includes URLs that trigger XSS via injected JavaScript and meta refresh tags.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: VP-ASP versions 5.0 and prior

No auth needed

Prerequisites: Access to the target VP-ASP application

MITRE ATT&CK