PT-2008-5127 · Turnkey Web Tools · Sunshop Shopping Cart

James Bercegay · Published 2008-08-22 · Updated 2018-10-11 · CVE-2008-3768

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Turnkey Web Tools SunShop Shopping Cart versions prior to 4.1.5

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in an edit registry action to "index.php", a vector involving the check email function, and other vectors.

Recommendations For versions prior to 4.1.5, update to version 4.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the class.ajax.php file and limiting the use of the check email function until a patch is applied. Avoid using the id parameter in the edit registry action to "index.php" until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-3768

Affected Products

Sunshop Shopping Cart

References · 9

• 🔥 https://exploit-db.com/exploits/6273 · Exploit
• 🔥 http://gulftech.org/?node=research&article_id=00125-08182008 · Exploit
• http://secunia.com/advisories/31539 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3768 · Security Note
• http://securityfocus.com/bid/30751 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44553 · Note
• http://demos.turnkeywebtools.com/ss4/docs/change_log.txt · Note
• http://securityreason.com/securityalert/4180 · Note
• http://securityfocus.com/archive/1/495578/100/0/threaded · Note