Irvian

SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549.

**Name of the Vulnerable Software and Affected Versions** Integry Systems LiveCart versions 1.1.1 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter to the "/category" URI. **Recommendations** For versions 1.1.1 and earlier, update to a version later than 1.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the "/category" URI or validating and sanitizing the `id` parameter to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** DL PayCart version 1.01 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `ItemID` parameter in the viewitem.php file. **Recommendations** For DL PayCart version 1.01, avoid using the `ItemID` parameter in the affected viewitem.php file until the issue is resolved. Consider restricting access to this parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pixaria Gallery versions prior to 1.4.3 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `cfg[sys][base path]` parameter in the resources/includes/class.Smarty.php file. **Recommendations** For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Pixaria Gallery versions prior to 1.4.3 **Description** The issue allows remote attackers to execute arbitrary PHP code. This is achieved via a URL in the `cfg[sys][base path]` parameter to scripts such as psg.smarty.lib.php and certain include and library scripts. **Recommendations** For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the `cfg[sys][base path]` parameter in affected scripts until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** CNStats version 2.9 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `bj` parameter to API endpoints such as "who r.php" or "who s.php" in the "reports/" directory. **Recommendations** For CNStats version 2.9, consider restricting access to the "who r.php" and "who s.php" files in the "reports/" directory to minimize the risk of exploitation. Avoid using the `bj` parameter in these API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Turnkey Web Tools SunShop Shopping Cart versions prior to 3.5.1 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `abs path` parameter to API endpoints such as "index.php" or "checkout.php". **Recommendations** For versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "index.php" and "checkout.php" API endpoints to minimize the risk of exploitation. Avoid using the `abs path` parameter in these endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Jshop Server version 1.3 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `jssShopFileSystem` parameter in the routines/fieldValidation.php file. **Recommendations** For Jshop Server version 1.3, consider restricting access to the `jssShopFileSystem` parameter to minimize the risk of exploitation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PicturesPro Photo Cart version 3.9 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `admin folder` and `path` parameters in the adminprint.php file. **Recommendations** For PicturesPro Photo Cart version 3.9, consider restricting access to the adminprint.php file and validating the `admin folder` and `path` parameters to prevent remote file inclusion attacks. As a temporary workaround, restrict the use of the `admin folder` and `path` parameters until a patch is available.