Test ID:	1.3.6.1.4.1.25623.1.0.15461
Category:	Web application abuses
Title:	CactuShop XSS and SQL injection flaws
Summary:	The remote host runs CactuShop, an e-commerce web application written in ASP.;;The remote version of this software is vulnerable to cross-site scripting;due to a lack of sanitization of user-supplied data in the script;'popuplargeimage.asp'.;;Successful exploitation of this issue may allow an attacker to execute;malicious script code on a vulnerable server.;;This version may also be vulnerable to SQL injection attacks in;the scripts 'mailorder.asp' and 'payonline.asp'. The user-supplied;input parameter 'strItems' is not filtered before being used in;an SQL query. Thus the query modification through malformed input;is possible.;;Successful exploitation of this vulnerability can enable an attacker;to execute commands in the system (via MS SQL the function xp_cmdshell).
Description:	Summary: The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script 'popuplargeimage.asp'. Successful exploitation of this issue may allow an attacker to execute malicious script code on a vulnerable server. This version may also be vulnerable to SQL injection attacks in the scripts 'mailorder.asp' and 'payonline.asp'. The user-supplied input parameter 'strItems' is not filtered before being used in an SQL query. Thus the query modification through malformed input is possible. Successful exploitation of this vulnerability can enable an attacker to execute commands in the system (via MS SQL the function xp_cmdshell). Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1881 BugTraq ID: 10019 http://www.securityfocus.com/bid/10019 Bugtraq: 20040331 CactuSoft CactuShop v5.x shopping cart software multiple security (Google Search) http://marc.info/?l=bugtraq&m=108075059013762&w=2 http://www.s-quadra.com/advisories/Adv-20040331.txt http://www.osvdb.org/4785 http://www.osvdb.org/4786 http://securitytracker.com/id?1009601 http://secunia.com/advisories/11272 XForce ISS Database: cactushop-multiple-sql-injection(15686) https://exchange.xforce.ibmcloud.com/vulnerabilities/15686 Common Vulnerability Exposure (CVE) ID: CVE-2004-1882 BugTraq ID: 10020 http://www.securityfocus.com/bid/10020 http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html http://www.osvdb.org/4787 XForce ISS Database: cactushop-popularlargeimageasp-xss(15687) https://exchange.xforce.ibmcloud.com/vulnerabilities/15687
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.