SunShop Shopping Cart 'class.ajax.php' Multiple SQL Injection Vulnerabilities

Bugtraq ID:	30751
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 19 2008 12:00AM
Updated:	Aug 28 2008 03:54AM
Credit:	James Bercegay of the GulfTech Security Research Team
Vulnerable:	TurnkeyWebTools SunShop Shopping Cart 4.1.4 TurnkeyWebTools SunShop Shopping Cart 4.1 TurnkeyWebTools SunShop Shopping Cart 4.0 TurnkeyWebTools SunShop Shopping Cart 3.5.1 TurnkeyWebTools SunShop Shopping Cart 3.5 TurnkeyWebTools SunShop Shopping Cart 3.4 RC1 TurnkeyWebTools SunShop Shopping Cart 2.6 TurnkeyWebTools SunShop Shopping Cart 2.5 TurnkeyWebTools SunShop Shopping Cart 2.4 TurnkeyWebTools SunShop Shopping Cart 2.2 TurnkeyWebTools SunShop Shopping Cart 2.1 TurnkeyWebTools SunShop Shopping Cart 2.0 TurnkeyWebTools SunShop Shopping Cart 1.5 TurnkeyWebTools SunShop Shopping Cart 4.0.0 RC6

Not Vulnerable:	TurnkeyWebTools SunShop Shopping Cart 4.1.5