Detections
Analytics
phpShop shop/flypage SQL Injection
medium Nessus Plugin ID 43159
Language:
Synopsis
The shopping cart application running on the remote web server has a SQL injection vulnerability.Description
The version of phpShop running on the remote host has a SQL injection vulnerability. Input to the 'product_id' parameter of 'shop/flypage' is not properly sanitized. A remote attacker could exploit this to issue arbitrary queries that could be used to control the database or mount further attacks. This attack only works if 'magic_quotes_gpc' is disabled in php.ini.This version of phpShop reportedly has several other vulnerabilities, though Nessus has not checked for those issues.
Solution
Enable magic_quote_gpc in php.ini.See Also
Plugin Details
Severity: Medium
ID: 43159
File Name: phpshop_shop_flypage_sqli.nasl
Version: 1.18
Type: remote
Family: CGI abuses
Published: 12/14/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:phpshop:phpshop
Required KB Items: www/phpshop
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 2/2/2008
Reference Information
CVE: CVE-2008-0681, CVE-2009-4571
BID: 27570