PT-2008-5127 · Turnkey Web Tools · Sunshop Shopping Cart

James Bercegay · Publicado 2008-08-22 · Atualizado 2018-10-11 · CVE-2008-3768

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Turnkey Web Tools SunShop Shopping Cart versions prior to 4.1.5

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in an edit registry action to "index.php", a vector involving the check email function, and other vectors.

Recommendations For versions prior to 4.1.5, update to version 4.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the class.ajax.php file and limiting the use of the check email function until a patch is applied. Avoid using the id parameter in the edit registry action to "index.php" until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-3768

Produtos afetados

Sunshop Shopping Cart

Referências · 9

• 🔥 https://exploit-db.com/exploits/6273 · Exploit
• 🔥 http://gulftech.org/?node=research&article_id=00125-08182008 · Exploit
• http://secunia.com/advisories/31539 · Aviso do Fabricante
• http://securityfocus.com/bid/30751 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44553 · Nota
• http://demos.turnkeywebtools.com/ss4/docs/change_log.txt · Nota
• http://securityreason.com/securityalert/4180 · Nota
• http://securityfocus.com/archive/1/495578/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3768 · Nota de Segurança