OScommerce Shopping_cart.PHP SQL Injection Vulnerability

Bugtraq ID:	19644
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2006 12:00AM
Updated:	Aug 22 2006 04:39PM
Credit:	James Bercegay of the GulfTech Security Research Team is credited with the discovery of this vulnerability.
Vulnerable:	osCommerce osCommerce 2.2 ms2
Not Vulnerable:	osCommerce osCommerce 2.2 ms2 060817 Update

OScommerce Shopping_cart.PHP SQL Injection Vulnerability

OSCommerce is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before being used as input to SQL queries.

A successful exploit could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

OScommerce Shopping_cart.PHP SQL Injection Vulnerability

This issue may be exploited with a web browser application.

OScommerce Shopping_cart.PHP SQL Injection Vulnerability

Solution:
The vendor has released update version 2.2 Milestone 2 060817 to address this issue; please see the reference section for details.


osCommerce osCommerce 2.2 ms2

• osCommerce osCommerce 2.2 Milestone 2 Update 060817
  http://www.oscommerce.com/solutions/downloads

OScommerce Shopping_cart.PHP SQL Injection Vulnerability

References:

• osCommerce 2.2 Milestone 2 060817 Update Released (osCommerce)
  
• osCommerce Homepage (osCommerce)