Description
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Five Star Review Script - 'index2.php?sort' Cross-Site Scripting EDB-28009 · webapps · Jun 12, 2006 · verified
- Five Star Review Script - 'report.php?item_id' Cross-Site Scripting EDB-28010 · webapps · Jun 12, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20613 third-party-advisory
- ADV-2006-2346 vdb-entry
- 26499 vdb-entry
- 1107 third-party-advisory
- fivestarreview-index2-xss(27188) vdb-entry
- 18390 vdb-entry
- fivestarreview-report-xss(27189) vdb-entry
- 26497 vdb-entry
- fivestarreview-profile-xss(27192) vdb-entry
- 26498 vdb-entry
- fivestarreview-searchreviews-xss(27190) vdb-entry
- 20060611 5 Star Review - review-script.com - XSS w/ cookie output mailing-list
- 26496 vdb-entry