11.41.13 Eshopbuilde CMS SQL Injection Vulnerability | |
================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability (SQL Injection) Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuilder is a E-shop CMS written in persian language. The Eshopbuilder product is vulnerable to SQL injection. Vulnerability Variant: ------------------ Injection "/home-f.asp","/opinions-f. http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= Injection "/more-f.asp" in "sitebid" ,"id","secText","client-ip" and "G_id" parameters. http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= other parameters("id","secText"," Injection "/selectintro.asp" in "sitebid" ,"id","ma_id","mi_id"," http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= other parameters("id","ma_id","mi_ Injection "/advcount.asp" in "sitebid","secText","adv_code" and "client-ip" parameters. http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= other parameters("secText" and "client-ip") is similar to "sitebid" parameter. Injection "/advview.asp" in "sitebid","secText","Grp_Code" http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= other parameters("secText","client- Injection "/dis_new-f.asp" in "sitebid","secText","newsId" and "client-ip" parameters. http://www.example.com/src= http://www.example.com/src= http://www.example.com/src= other parameters("secText","newsId" and "client-ip") is similar to "sitebid" parameter. Solution: ------------------ Input validation of Parameter "sitebid","id","secText"," Credit: ------------------ Isfahan University of Technology - Computer Emergency Response Team Thanks to : M. Fereidounian, M. R. Faghani, N. Fathi, E. Jafari | |
|
Total comments: 0 | |