------------------------------------------------------------------------
OrderSys <= 1.6.4 Sql Injection Vulnerabilities
------------------------------------------------------------------------
author............: muuratsalo (Revshell.com)
contact...........: muuratsalo[at]gmail[dot]com
download..........: Home - PHP Labware
[0x01] Vulnerability overview:
All versions of OrderSys <= 1.6.4 are affected by Sql injection vulnerabilities.
A valid account could be required to exploit the vulnerabilities.
[0x02] Disclosure timeline:
[04/11/2011] - Multiple sql injection vulnerabilities discovered and reported to the vendor
[05/11/2011] - Multiple sql injection vulnerabilities fixed, OrderSys 1.6.4 released.
[05/11/2011] - OrderSys 1.6.4 is still vulnerable to some sql injection vulnerabilities.
[05/11/2011] - The vendor is currently working on fixing the reported issues.
[06/11/2011] - Public disclosure
[0x03] Proof of Concept:
[url]https://tik.lat/F8B49 [SQL INJECTION]&page=0&order=Address&order_type=ASC
https://tik.lat/Rxk6L [SQL INJECTION]&page=0&order=Address&order_type=ASC
https://tik.lat/Udbc5 [SQL INJECTION]&page=0&order=Address&order_type=ASC
OrderSys <= 1.6.4 Sql Injection Vulnerabilities
------------------------------------------------------------------------
author............: muuratsalo (Revshell.com)
contact...........: muuratsalo[at]gmail[dot]com
download..........: Home - PHP Labware
[0x01] Vulnerability overview:
All versions of OrderSys <= 1.6.4 are affected by Sql injection vulnerabilities.
A valid account could be required to exploit the vulnerabilities.
[0x02] Disclosure timeline:
[04/11/2011] - Multiple sql injection vulnerabilities discovered and reported to the vendor
[05/11/2011] - Multiple sql injection vulnerabilities fixed, OrderSys 1.6.4 released.
[05/11/2011] - OrderSys 1.6.4 is still vulnerable to some sql injection vulnerabilities.
[05/11/2011] - The vendor is currently working on fixing the reported issues.
[06/11/2011] - Public disclosure
[0x03] Proof of Concept:
[url]https://tik.lat/F8B49 [SQL INJECTION]&page=0&order=Address&order_type=ASC
https://tik.lat/Rxk6L [SQL INJECTION]&page=0&order=Address&order_type=ASC
https://tik.lat/Udbc5 [SQL INJECTION]&page=0&order=Address&order_type=ASC
