Mustafa Can Bjorn has reported two vulnerabilities in AspSitem, which can be exploited by malicious users to disclose sensitive information or malicious people to conduct SQL injection attacks.

1) Input passed to the "bid" parameter in Anket.asp is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) Access to private messages is not properly restricted, which can be exploited to disclose arbitrary messages by manipulating the "id" parameter in Hesabim.asp.

The vulnerabilities have been reported in version 2.0. Other versions may also be affected.

Solution
A patch for the SQL injection vulnerability is reportedly available at:
Further details available to Secunia VIM customers

Provided and/or discovered by
Mustafa Can Bjorn

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.nukedx.com/?viewdoc=39

Deep Links
Links available to Secunia VIM customers