osCommerce SQL Injection Vulnerability in Product Info Component

A SQL injection vulnerability has been identified in osCommerce version 2.3.4.1. This issue allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'products_id' parameter in 'product_info.php' requests. Exploitation of this vulnerability could lead to the extraction of sensitive database information.

Impact

Exploitation of this vulnerability allows for boolean-based SQL injection, where attackers can manipulate SQL queries to extract database information.

Reproduction

To reproduce this vulnerability, navigate to the 'product_info.php' page and replace the 'products_id' parameter with a high value, such as 99999999. Then, append a boolean-based SQL injection payload to the end of the URL. The injected payload will be executed by the application's database, allowing the attacker to extract sensitive information.