PT-2006-3745 · X Cart · X-Cart

Published 2006-06-05 · Updated 2025-01-17 · CVE-2006-2827

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1

Description The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed description" and "Search also in ISBN." The vendor disputed this issue, stating that it does not impose any security threat and remote attackers cannot add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters.

Recommendations For X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1, consider restricting access to the search.php script or disabling the "Search in Detailed description" and "Search also in ISBN" settings until a patch is available. As a temporary workaround, avoid using the "Search for pattern" field in the search.php script until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2827

Affected Products

X-Cart

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-2827 · Security Note
• https://t.me/cvenotify/107746 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25944 · Note
• http://osvdb.org/25204 · Note
• http://pridels0.blogspot.com/2006/04/x-cart-sql-inj-vuln.html · Note
• https://t.me/cvenotify/89773 · Telegram Post