CVE-2015-9226
HIGHAlegroCart 1.2.8 - Authenticated SQL Injection via Download Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-9226. PoCs published by Curesec Research Team.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in AlegroCart 1.2.8, affecting both the admin area (via file upload) and the customer checkout process (via PayPal interaction). The PoC includes specific payloads and steps to trigger the injection.
Description
Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php.
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in AlegroCart 1.2.8, affecting both the admin area (via file upload) and the customer checkout process (via PayPal interaction). The PoC includes specific payloads and steps to trigger the injection.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H