by r0t,der4444,cembo,VietMafia

Monday, December 05, 2005

Cars Portal v1.x SQL injection.

Cars Portal v1.x SQL injection.

Vuln. dicovered by : r0t
Date: 5 dec. 2005
vendor:http://software.getcar.biz/
affected version:v1.1 and prior

Product Description:
Cars Portal is a software solution for running auto classifieds portals. It provides functionality for the private sellers to signup, list their car for sale and make changes in their ads online using the private sellers administration space. The product provides special functionalities for the dealers to work and manage multiple ads. An affiliate functionality is also included, affiliate partners may signup and earn commissions on all the sales done through their links. The product comes with a very powerful back office application for the administrators, allowing them not only to manage the cars portal settings, the dealers, affiliates etc. but also providing them full control over the website, its structure and content, statistics, search engines functionality and many others.

Vuln. Description:
Input passed to the "page" and "car" parameter in "index.php" isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

example:
/index.php?page=[SQL]
/index.php?page=en_Home&car=[SQL]


Solution:
Edit the source code to ensure that input is properly sanitised.

1 Comments:

Anonymous Anonymous told...

Such bull shit!

4:27 PM

 

Post a Comment

<< Home

 
Copyright (c) 2006 Pridels Sec Crew