https://pok3.xyz/tags/parameter-pollution/Recent content in Parameter-Pollution on pok3 // security notesHugoen-usWed, 27 Mar 2024 18:59:35 +0100https://pok3.xyz/posts/openecsc2024/perfect-shop/Wed, 27 Mar 2024 18:59:35 +0100https://pok3.xyz/posts/openecsc2024/perfect-shop/<h2 id="initial-thoughts" class="heading"> <a href="#initial-thoughts" class="heading-anchor" aria-label="Link to this section">#</a>Initial thoughts </h2> <h3 id="first-look-at-the-webpage" class="heading"> <a href="#first-look-at-the-webpage" class="heading-anchor" aria-label="Link to this section">#</a>First look at the webpage </h3> <p>In my initial exploration of the website, I noticed it had various products listed with brief descriptions and prices.</p> <p> <figure class="md-image"> <a href="https://pok3.xyz/posts/openecsc2024/perfect-shop/img/perfectshop_startpage.png" target="_blank" rel="noopener" data-zoom> <picture> <source srcset="https://pok3.xyz/posts/openecsc2024/perfect-shop/img/perfectshop_startpage_hu_6c730f9302849c79.webp" type="image/webp"> <img src="https://pok3.xyz/posts/openecsc2024/perfect-shop/img/perfectshop_startpage.png" alt="Perfectshop Startpage" width="1887" height="831" loading="lazy" decoding="async"> </picture> </a> </figure> </p> <p>Seeing a search bar raised some suspicion for me because they&rsquo;re often used for sneaky attacks like reflected <a href="https://en.wikipedia.org/wiki/Cross-site_scripting" class="ext" target="_blank" rel="noopener noreferrer">Cross-site scripting (XSS)</a> or <a href="https://en.wikipedia.org/wiki/SQL_injection" class="ext" target="_blank" rel="noopener noreferrer">SQL injections</a> . Additionally, I stumbled upon an admin page where we could tweak product details, although it seemed pointless without an admin password.</p>