[原文]Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name parameter to adv_search.asp and (2) b_search parameter to bsearch.asp. NOTE: the original disclosure was specifically only for an XSS issue, but the CVE description was for SQL injection. Since the original disclosure, SQL injection vectors have been reported. This CVE might be REJECTed or significantly altered pending additional information.
ASPS Shopping Cart contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'srch_product_name' parameter upon submission to the 'adv_search.asp' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.
-
时间线
2005-12-03
Unknow
2005-12-03
Unknow
-
解决方案
The vendor has discontinued this product and therefore has no patch or upgrade that mitigates this problem. It is recommended that an alternate software package be used in its place.
三人行，必有我师焉。择其善者而从之，其不善者而改之。