Description
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping_cart.php with malicious currency values using boolean-based SQL injection payloads to extract sensitive database information.
Problem types
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Product status
Credits
Mehmet EMIROGLU
References
www.exploit-db.com/exploits/46328 (ExploitDB-46328)
www.oscommerce.com (osCommerce Official Website)
www.vulncheck.com/...ce-sql-injection-via-currency-parameter (VulnCheck Advisory: osCommerce 2.3.4.1 SQL Injection via currency Parameter)