high8.8Public exploit code
CVE-2014-5140
The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LoadedCommerce7 - Systemic Query Factory2014-09-07 · webapps · php
Impact
The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Loadedcommerce | Loaded7 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128183/Loaded-Commerce-7-Shopping-Cart-SQL-Injection.html
- http://resources.infosecinstitute.com/exploiting-systemic-query-vulnerabilities-attempt-re-invent-pdo/
- http://www.exploit-db.com/exploits/34552
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95791
- https://github.com/loadedcommerce/loaded7/pull/520
- http://packetstormsecurity.com/files/128183/Loaded-Commerce-7-Shopping-Cart-SQL-Injection.html
- http://resources.infosecinstitute.com/exploiting-systemic-query-vulnerabilities-attempt-re-invent-pdo/
- http://www.exploit-db.com/exploits/34552
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95791
- https://github.com/loadedcommerce/loaded7/pull/520