iHTML Merchant Feedback Form Security Vulnerability

Bugtraq ID:	694
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 28 1999 12:00AM
Updated:	Sep 28 1999 12:00AM
Credit:	This vulnerability was found by Team Asylum <[email protected]>.
Vulnerable:	Inline Internet Systems iHTML Merchant Professional 2.0 Inline Internet Systems iHTML Merchant Mall Edition 2.0 Inline Internet Systems iHTML Merchant Enterprise 2.0 Inline Internet Systems iHTML Merchant 1.6 Inline Internet Systems iHTML Merchant 1.5 Inline Internet Systems iHTML Merchant 1.4 Inline Internet Systems iHTML Merchant 1.3 Inline Internet Systems iHTML Merchant 1.2 Inline Internet Systems iHTML Merchant 1.1 Inline Internet Systems iHTML Merchant 1.0
Not Vulnerable:

iHTML Merchant Feedback Form Security Vulnerability

A vulnerability in iHTML Merchant allows remote user to execute arbitrary code on the iHTML Merchant system.

iHTML Merchant is an e-commerce solution written in iHTML. A vulnerability in the processing of the feedback form allows remote users to delete files, upload files, and execute files.

iHTML Merchant Feedback Form Security Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

iHTML Merchant Feedback Form Security Vulnerability

References:

• iHTML Merchant Home Page (Inline Internet Systems)