From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue Jul 08 2003 - 05:21:00 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
ProductCart SQL Injection Vulnerabilities

READ ONLINE:
http://www.secunia.com/advisories/9193/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Manipulation of data, Exposure of sensitive
information

WHERE:
From remote

SOFTWARE:
ProductCart 1.x
ProductCart 2.x

DESCRIPTION:
Two vulnerabilities have been identified in ProductCart, which can be
exploited by malicious people to conduct SQL injection attacks.

Due to an input validation error in "cutsva.asp", it is possible to
insert arbitrary SQL code, which potentially could lead to disclosure
of sensitive information or allow manipulation of existing data.

Example:
http://[victim]/productcart/pc/Custvb.asp?redirectUrl=&Email=%27+having+1%3D1--&_email=email&password=asd&_password=required&Submit.x=33&Submit.y=5&Submit=Submit

However, it is also possible for malicious people to bypass user
authentication and gain access to the administrative interface. The
problem is that "login.asp" doesn't perform adequate input
validation, which can be exploited by a classical SQL injection
attack.

Example:
http://[victim]/produccart/pdacmin/login.asp?idadmin='' or 1=1--

The vulnerabilities have been reported to affect version 2 and prior.

SOLUTION:
A fix has been released for the first vulnerability:
http://www.earlyimpact.com/productcart/support/security-alert-070603.asp

The second vulnerability can be fixed by following these guide
lines:
http://www.earlyimpact.com/productcart/support/security-alert-070403.asp

REPORTED BY / CREDITS:
Bosen

ORIGINAL ADVISORY:
http://bosen.net/releases/?id=40

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]