Mall23 AddItem.ASP SQL Injection Vulnerability
BID:14898
Info
Mall23 AddItem.ASP SQL Injection Vulnerability
| Bugtraq ID: | 14898 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 21 2005 12:00AM |
| Updated: | Sep 21 2005 12:00AM |
| Credit: | David Sopas Ferreira aka SmOk3 is credited with the discovery of this vulnerability. |
| Vulnerable: |
Mall23 Mall23 |
| Not Vulnerable: |
Mall23 Mall23 4.11 |
Discussion
Mall23 AddItem.ASP SQL Injection Vulnerability
Mall23 is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Mall23 is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
Mall23 AddItem.ASP SQL Injection Vulnerability
No exploit is required.
The following proof of concept is available:
<form action="http://www.example.com/m23Basket/AddItem.asp?idProduct=6" method="POST">
<input type="hidden" name="idOption_Dropdown_2" value="'[SQL INJECTION]">
<input type="Submit" name="submit" value="Test Exploit">
</form>
No exploit is required.
The following proof of concept is available:
<form action="http://www.example.com/m23Basket/AddItem.asp?idProduct=6" method="POST">
<input type="hidden" name="idOption_Dropdown_2" value="'[SQL INJECTION]">
<input type="Submit" name="submit" value="Test Exploit">
</form>
Solution / Fix
Mall23 AddItem.ASP SQL Injection Vulnerability
Solution:
The vendor has addressed this issue in version 4.11. Users should contact the vendor for details on obtaining the appropriate update.
Solution:
The vendor has addressed this issue in version 4.11. Users should contact the vendor for details on obtaining the appropriate update.
References
Mall23 AddItem.ASP SQL Injection Vulnerability
References:
References:
- Mall23 Web Site (Mall23)
- SS#21092005 - Mall23 SQL Injection (POST method) (SystemSecure.org)