Multiple Vulnerabilities in Cactusoft’s CactuShop 5.x

Reported March 31, 2004 by S-Quadra.





  • Cactusoft’s CactuShop 5.x




Two vulnerabilities exist in Cactusoft’s CactuShop 5.x shopping cart software, the most serious of which can cause execution of arbitrary commands on the vulnerable system. These two vulnerabilities consist of:

  • a SQL Injection condition in the pages mailorder.asp and payonline.asp. An attacker who successfully exploits this vulnerability can execute commands (via the Microsoft SQL xp_cmdshell function) in the system security context.

  • a Cross Site Scripting vulnerability in the script largeimage.asp. By injecting specially crafted JavaScript code in the URL and tricking a user into visiting it, a potential attacker could steal the user’s session ID and access the user's personal data.



The vendor, CactuSoft, has not released a fix for these vulnerabilities.




Discovered by Nick Gudov.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.