FishCart 3.1 - 'upstnt.php?cartid' SQL Injection

EDB-ID:

25604


Author:

Dcrab

Type:

webapps


Platform:

PHP

Date:

2005-05-04


Become a Certified Penetration Tester

Enroll in Penetration Testing with Kali Linux and pass the exam to become an Offensive Security Certified Professional (OSCP). All new content for 2020.

source: https://www.securityfocus.com/bid/13499/info
   
FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
   
A successful exploit of the SQL-injection issues could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
   
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo31/upstnt.php?zid=1&lid=1&cartid='SQL_INJECTION