PT-2020-7709 · Unknown · Loaded Commerce

Breakingtech · Published 2020-01-03 · Updated 2020-01-14 · CVE-2014-5140

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Loaded Commerce version 7

Description The issue concerns the bindReplace function in the query factory, which fails to properly handle colon characters. This allows remote authenticated users to conduct SQL injection attacks through the First name and Last name fields in the address book.

Recommendations For Loaded Commerce version 7, consider restricting access to the address book fields until a proper fix is applied, and ensure that user input is thoroughly sanitized to prevent SQL injection attacks. As a temporary workaround, consider disabling the bindReplace function in the query factory until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-5140

Affected Products

Loaded Commerce

References · 7

• 🔥 http://exploit-db.com/exploits/34552 · Exploit
• 🔥 https://exploit-db.com/exploits/34552 · Exploit
• 🔥 http://packetstormsecurity.com/files/128183/Loaded-Commerce-7-Shopping-Cart-SQL-Injection.html · Exploit
• https://github.com/loadedcommerce/loaded7/pull/520 · Patch
• http://resources.infosecinstitute.com/exploiting-systemic-query-vulnerabilities-attempt-re-invent-pdo · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-5140 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95791 · Note