eShop CMS 'index.php' SQL Injection Vulnerability
BID:28771
Info
eShop CMS 'index.php' SQL Injection Vulnerability
| Bugtraq ID: | 28771 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2008 12:00AM |
| Updated: | Apr 18 2008 12:28AM |
| Credit: | Stack-Terrorist |
| Vulnerable: |
SmallBiz eShop CMS 0 |
| Not Vulnerable: | |
Discussion
eShop CMS 'index.php' SQL Injection Vulnerability
eShop CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
An attacker may be able to exploit this issue to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.
eShop CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
An attacker may be able to exploit this issue to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.
Exploit / POC
eShop CMS 'index.php' SQL Injection Vulnerability
Attackers can exploit this issue via a browser.
The following proof-of-concept URI is available:
http://www.example.coml/index.php?content_id=-20'%20union%20select%20convert(concat(database(),char(58),user(),char(58),version()),char)/*
Attackers can exploit this issue via a browser.
The following proof-of-concept URI is available:
http://www.example.coml/index.php?content_id=-20'%20union%20select%20convert(concat(database(),char(58),user(),char(58),version()),char)/*
Solution / Fix
eShop CMS 'index.php' SQL Injection Vulnerability
Solution:
The vendor has released fixes. Users of affected packages should contact the vendor for information on obtaining and applying fixes.
Solution:
The vendor has released fixes. Users of affected packages should contact the vendor for information on obtaining and applying fixes.