WebCortex WebStores2000 SQL Injection Vulnerability
BID:7766
Info
WebCortex WebStores2000 SQL Injection Vulnerability
| Bugtraq ID: | 7766 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0304 |
| Remote: | Yes |
| Local: | No |
| Published: | May 31 2003 12:00AM |
| Updated: | Jul 11 2009 10:06PM |
| Credit: | Discovery of this vulnerability credited to Bosen <[email protected]>. |
| Vulnerable: |
WebCortex WebStores2000 |
| Not Vulnerable: | |
Discussion
WebCortex WebStores2000 SQL Injection Vulnerability
This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000.
Successful exploitation may allow for modification of the structure of SQL queries, resulting in information disclosure, or database corruption.
This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000.
Successful exploitation may allow for modification of the structure of SQL queries, resulting in information disclosure, or database corruption.
Solution / Fix
WebCortex WebStores2000 SQL Injection Vulnerability
Solution:
It has been reported that the vendor has addressed this issue in the latest release of Webstores2000. This however has not been confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It has been reported that the vendor has addressed this issue in the latest release of Webstores2000. This however has not been confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.