Joomla redSHOP Component Search Form Multiple SQL Injection Vulnerabilities

Bugtraq ID:	41728
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 15 2010 12:00AM
Updated:	Jul 15 2010 12:00AM
Credit:	Salvatore Fresta
Vulnerable:	Redcomponent Redshop 1.0.23.1
Not Vulnerable:

Joomla redSHOP Component Search Form Multiple SQL Injection Vulnerabilities

The redSHOP component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit requires that 'magic_quotes_gpc' is disabled.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

redSHOP 1.0.23.1 is vulnerable; other versions may also be affected.

Joomla redSHOP Component Search Form Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit this issue.

The following example data is available:

' AND (SELECT(IF(ASCII(0x41) = 64,false,NULL))) OR '
' AND (SELECT(IF(ASCII(0x41) = 65,true,NULL))) OR '

Joomla redSHOP Component Search Form Multiple SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Joomla redSHOP Component Search Form Multiple SQL Injection Vulnerabilities

References:

• redCOMPONENT Homepage (redCOMPONENT)