SelfComposer CMS SQL Injection

`*==== =={ Advisory 14/5/2010 } ======*  
  
*SQL injection vulnerability in SelfComposer CMS  
*  
  
*Vendor's Description of Software:*  
  
*# http://www.selfcomposer.it*  
  
*Dork:*  
  
*allinurl:"prodotti.asp?idpadrerif="*  
  
*Application Info:*  
  
*Name: *SelfComposer  
  
*Vulnerability Info:*  
  
*Type: *SQL injection Vulnerability  
  
*Risk: High*  
  
*Fix:*  
  
*N/A*  
  
*Time Table:*  
  
*06/05/2010 - Vendor notified.*  
*Additional Info:*  
  
All the input passed via "idprod", "idpadrerif", "idreferenza",  
"idpadrerifIstituzionali"  
is not properly sanitised before being used in a sql query.  
  
*Solution:*  
  
Input validation of "idprod", "idpadrerif", "idreferenza",  
"idpadrerifIstituzionali"  
parameters should be corrected.  
  
*Vulnerability:*  
  
# http://[site]/scheda.asp?idprod=[SQLi]&idpadrerif=[SQLi]  
  
# http://[site]/schedaistituzionale.asp?idreferenza=[SQLi]&idpadrerifIstituzionali=[SQLi]  
  
*Credit:*  
  
Discoverd By: Locu  
  
Website: http://xlocux.wordpress.com  
  
Contacts: xlocux[-at-]gmail.com  
  
*============ {EOF} =============*  
  
`