CVE-2010-0432
Apache OFBiz < 09.04 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-0432. PoCs published by Lucas Apa.
AI-analyzed exploit summary This is a detailed advisory describing multiple XSS vulnerabilities in Apache OFBiz. It includes technical descriptions, affected versions, and proof-of-concept URLs demonstrating reflected and persistent XSS attacks.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to control/exportProductListing, (2) the partyId parameter to partymgr/control/viewprofile (aka partymgr/control/login), (3) the start parameter to myportal/control/showPortalPage, (4) an invalid URI beginning with /facility/control/ReceiveReturn (aka /crmsfa/control/ReceiveReturn or /cms/control/ReceiveReturn), (5) the contentId parameter (aka the entityName variable) to ecommerce/control/ViewBlogArticle, (6) the entityName parameter to webtools/control/FindGeneric, or the (7) subject or (8) content parameter to an unspecified component under ecommerce/control/contactus.
Exploits (3)
This is a detailed advisory describing multiple XSS vulnerabilities in Apache OFBiz. It includes technical descriptions, affected versions, and proof-of-concept URLs demonstrating reflected and persistent XSS attacks.
This JavaScript PoC exploits CVE-2010-0432 in Apache OFBiz by sending a crafted SQL command via an HTTP POST request to the EntitySQLProcessor endpoint, enabling remote command execution. The exploit uses XMLHttpRequest to submit the payload with proper headers and cookie handling.
This exploit leverages CVE-2010-0432 to create a new admin user in Apache OFBiz by chaining multiple HTTP requests to bypass authentication and elevate privileges. It uses XMLHTTP requests to interact with the vulnerable endpoints and assigns the FULLADMIN role to the newly created user.