Detections
Analytics
MetaCart E-Shop productsByCategory.ASP Multiple Vulnerabilities
high Nessus Plugin ID 18290
Language:
Synopsis
The remote web server is hosting a CGI application that is affected by multiple vulnerabilities.Description
The remote host is running the MetaCart e-Shop, an online store written in ASP.Due to a lack of user input validation, the remote version of this software is vulnerable to various SQL injection and cross-site scripting attacks.
An attacker may exploit these flaws to execute arbitrary SQL commands against the remote database or to perform a cross-site scripting attack using the remote host.
Solution
There is no known solution at this time.See Also
https://seclists.org/bugtraq/2005/Apr/426
https://seclists.org/bugtraq/2005/Apr/427
https://seclists.org/bugtraq/2005/Apr/428
Plugin Details
Severity: High
ID: 18290
File Name: metacart_sql.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 5/17/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/ASP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 4/26/2005