New Zenner
- Join Date:
- Jul 2012
- Posts:
- 6
- Plugin Contributions:
- 0
XSS (Cross-Site-Scripting) vulnerability in 1.39.h
Hi,
I hope you guys will be able to help us.
We're about to be PCI compliant, we just have 2 vulnerabilities left regarding
Vulnerability: CVE-2011-4547
description: Multiple Cross-site scripting (XSS) vulnerabilities in Zen Cart version 1.3.9h allows remote attackers to inject arbitrary web script or HTML via the main_page parameter or PATH_INFO.
Our PCI compliance provider is asking us to "fix it'" by :
To follow up, can your organization confirm that tpl_header_test_info.php has been removed from this system to mitigate the risk?
Alternatively, is there a policy in place to permanently disable debugging?
Please let us know.
Should i just delete that tpl_header_test_info.php ?
Or should i delete that piece of code only:
Code:
line 72: echo '<br /><strong>TESTING INFO:</strong> Time page: <strong>' . $_GET['main_page'] . '</strong> was loaded is: <strong>' . date('H:i:s', time()) . '</strong><br /><br />';
...
line 75: echo "GLOBALS[$main_page] and HTTP_GET_VARS['main_page'] and _GET['main_page'] = " . $GLOBALS['main_page'] . ' - ' . $HTTP_GET_VARS['main_page'] . ' - ' . $_GET['main_page'] . '<br /><br />';
...
line 76: echo "_SERVER['PHP_SELF'] and _GET['PHP_SELF'] and PHP_SELF and _SESSION['PHP_SELF'] = " . $_SERVER['PHP_SELF'] . ' - ' . $_GET['PHP_SELF'] . ' - ' . $PHP_SELF . ' - ' . $_SESSION['PHP_SELF'] . '<br /><br />';
We need to be PCI compliant ASAP and we dont want to upgrade to 1.5 right now so any suggestions would be greatly appreciated!
Hope to hear from you soon . Thank you!
