Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
BID:9967
Info
Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
| Bugtraq ID: | 9967 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 24 2004 12:00AM |
| Updated: | Mar 24 2004 12:00AM |
| Credit: | This issue has been reported by the vendor. |
| Vulnerable: |
Virtual Programming VP-ASP 5.00 Virtual Programming VP-ASP 4.50 Virtual Programming VP-ASP 4.00 |
| Not Vulnerable: | |
Discussion
Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
It has been reported that the VP-ASP Shopping Cart is prone to a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user input before using it in an SQL query.
It may be possible for an attacker to leverage this issue to disclose the administrator password hash, or other sensitive information contained within the database by exploiting this issue.
It has been reported that the VP-ASP Shopping Cart is prone to a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user input before using it in an SQL query.
It may be possible for an attacker to leverage this issue to disclose the administrator password hash, or other sensitive information contained within the database by exploiting this issue.
Exploit / POC
Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
Leveraging this vulnerability does not require an exploit.
Leveraging this vulnerability does not require an exploit.
Solution / Fix
Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
Solution:
The vendor has suggested the following solution for this issue:
This fix is included in VP-ASP 5.0 after July 10, 2003 and does not need to be applied to 5.0
edit file 'shopreviewlist.asp' and 'shopreviewadd.asp'
Replace the following code:
If catalogid="" then
shoperror LangNoCatalogId
end if
With:
If not isnumeric(catalogid) then
shoperror LangNoCatalogId
end if
Solution:
The vendor has suggested the following solution for this issue:
This fix is included in VP-ASP 5.0 after July 10, 2003 and does not need to be applied to 5.0
edit file 'shopreviewlist.asp' and 'shopreviewadd.asp'
Replace the following code:
If catalogid="" then
shoperror LangNoCatalogId
end if
With:
If not isnumeric(catalogid) then
shoperror LangNoCatalogId
end if
References
Virtual Programming VP-ASP Shopping Cart CatalogID SQL Injection Vulnerability
References:
References:
- VP-ASP Homepage (Virtual Programming )
- VP-ASP Security FAQ (Virtual Programming)