CyberStrong eShop 10expand.ASP SQL Injection Vulnerability

Bugtraq ID:	14103
Class:	Input Validation Error
CVE:	CVE-2003-0509
Remote:	Yes
Local:	No
Published:	Jun 30 2003 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Credit is given to [email protected] for discovering this vulnerability.
Vulnerable:	CyberStrong eShop ASP Shopping Cart 4.2
Not Vulnerable:	CyberStrong eShop ASP Shopping Cart 4.6

CyberStrong eShop 10expand.ASP SQL Injection Vulnerability

CyberStrong eShop is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. The attacker may accomplish this by passing malicious SQL syntax to the vulnerable '10expand.asp' script.

It is reported that the attacker may steal eShop authentication information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query.

CyberStrong eShop 10expand.ASP SQL Injection Vulnerability

The following example was provided:

http://www.example.com/eshop/10expand.asp?ProductCode='

CyberStrong eShop 10expand.ASP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.


CyberStrong eShop ASP Shopping Cart 4.2

• CyberStrong CyberStrong 5.2
  http://www.cyberstrong.com/eshop/

CyberStrong eShop 10expand.ASP SQL Injection Vulnerability

References:

• CyberStrong Shopping Cart - Advisory & Exploit Code ([email protected])
  
• eShop ASP Shopping Cart Homepage (CyberStrong)