10 lines
No EOL
860 B
Text
Executable file
10 lines
No EOL
860 B
Text
Executable file
source: http://www.securityfocus.com/bid/13376/info
|
|
|
|
An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.
|
|
|
|
An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.
|
|
|
|
http://www.example.com/eshopv-8/product.asp?intProdID='SQL_INJECTION&%3bstrCatalog_NAME=&%3bstrSubCatalog_NAME=&%3bstrSubCatalogID=&%3bintCatalogID=10001&%3bCurCatalogID=
|
|
http://www.example.com/mcart2pfp/product.asp?intProdID='SQL_INJECTION
|
|
http://www.example.com/mcart2sqluk/product.asp?intProdID='SQL_INJECTION
|
|
http://www.example.com/mcart2pal/product.asp?intProdID='SQL_INJECTION |