AJ Auction Pro OOPD 'id' Parameter SQL Injection Vulnerability

Bugtraq ID:	33366
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 20 2009 12:00AM
Updated:	Jan 27 2009 07:49PM
Credit:	Snakespc
Vulnerable:	AJSquare AJ Auction Pro OOPD 2.3
Not Vulnerable:

AJ Auction Pro OOPD 'id' Parameter SQL Injection Vulnerability

AJ Auction Pro OOPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AJ Auction Pro OOPD 2.3 is vulnerable; other versions may also be affected.

AJ Auction Pro OOPD 'id' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/oopd/index.php?do=search&id=-9+UNION SELECT concat(user_name,0x3a,password)+from+admin_users--

AJ Auction Pro OOPD 'id' Parameter SQL Injection Vulnerability

Solution:
Vendor updates are available. Contact the vendor for details.

AJ Auction Pro OOPD 'id' Parameter SQL Injection Vulnerability

References:

• AJ Auction Homepage (AJ Square)