VirtueMart SQL Injection Vulnerability

vendor:

VirtueMart

by:

SOA Crew a.k.a Neo-GabrieL

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: VirtueMart

Affected Version From: VirtueMart 1.0

Affected Version To: VirtueMart 1.0

Patch Exists: YES

Related CWE: N/A

CPE: a:virtuemart:virtuemart:1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

VirtueMart SQL Injection Vulnerability

VirtueMart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to construct SQL queries in a way that would allow an attacker to modify the logic of the executed query.

Source

Exploit-DB raw data:

Bugtraq ID:  	 37317
Class: 	Input Validation Error
CVE: 	
Remote: 	Yes
Local: 	No
Published: 	Dec 14 2009 12:00AM
Updated: 	Dec 17 2009 06:03PM
Credit: 	SOA Crew a.k.a Neo-GabrieL
Vulnerable: 	VirtueMart VirtueMart 1.0

VirtueMart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

VirtueMart 1.0 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://server/index.php?page=shop.product_details&flypage=shop.flypage&product_id=[SOA injection]