SQL injection in Bigware shop software

2012-06-18T00:00:00
ID SECURITYVULNS:DOC:28193
Type securityvulns
Reporter Securityvulns
Modified 2012-06-18T00:00:00

Description

The Bigware shop software prior to version 2.17 contains a SQL injection, resulting in full database compromise. The injection point is the POST parameter 'pollid' in the module main_bigware_54.php.

Proof of concept is at: http://files.dw-itsecurity.de/54.zip

Time line:

01/23/2012: Vendor contacted 01/24/2012: Vendor response 04/16/2012: Vendor patch release 06/05/2012: Disclosure