VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
BID:33480
Info
VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
| Bugtraq ID: | 33480 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 27 2009 12:00AM |
| Updated: | Apr 01 2009 05:16PM |
| Credit: | Janek Vind "waraxe" |
| Vulnerable: |
VirtueMart VirtueMart 1.1.2 VirtueMart VirtueMart 1.0.14 VirtueMart VirtueMart 1.0.13 VirtueMart VirtueMart 1.0.12 VirtueMart VirtueMart 1.0.11 VirtueMart VirtueMart 1.0.10 VirtueMart VirtueMart 1.0.7 VirtueMart VirtueMart 1.0.6 VirtueMart VirtueMart 1.0.13a VirtueMart Joomla eCommerce Edition 1.1.2 VirtueMart Joomla eCommerce Edition 1.0.13 VirtueMart Joomla eCommerce Edition 1.0.12 VirtueMart Joomla eCommerce Edition 1.0.11 VirtueMart Joomla eCommerce Edition 1.0.7 |
| Not Vulnerable: |
VirtueMart VirtueMart 1.1.3 VirtueMart Joomla eCommerce Edition 1.1.3 |
Discussion
VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
VirtueMart is prone to multiple security vulnerabilities, including local and remote file-include issues, SQL-injection issues, cross-site-scripting issues, a command-execution issue, and an information-disclosure issue.
Attackers can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user, steal cookie-based authentication credentials, or execute arbitrary commands in the context of the webserver process.
VirtueMart is prone to multiple security vulnerabilities, including local and remote file-include issues, SQL-injection issues, cross-site-scripting issues, a command-execution issue, and an information-disclosure issue.
Attackers can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user, steal cookie-based authentication credentials, or execute arbitrary commands in the context of the webserver process.
Exploit / POC
VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
An attacker can exploit these issues with a browser. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting user into visiting a malicious URI.
Example URIs are available.
A module for the MetaSploit framework is also available.
An attacker can exploit these issues with a browser. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting user into visiting a malicious URI.
Example URIs are available.
A module for the MetaSploit framework is also available.
Solution / Fix
VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
VirtueMart Prior to 1.1.3 Multiple Security Vulnerabilities
References:
References:
- [waraxe-2009-SA#071] - Multiple Vulnerabilities in VirtueMart 1.1.2 (Janek Vind "waraxe")
- VirtueMart Homepage (VirtueMart)