GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
BID:11150
Info
GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 11150 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2004 12:00AM |
| Updated: | Sep 10 2004 12:00AM |
| Credit: | Discovery is credited to Criolabs <[email protected]>. |
| Vulnerable: |
getSolutions getInternet |
| Not Vulnerable: | |
Discussion
GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query.
An attacker may exploit these issues to manipulate and inject SQL queries onto the underlying database. It is possible to leverage this issue to steal database contents including administrator password hashes and user credentials as well as to make attacks against the underlying database.
getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query.
An attacker may exploit these issues to manipulate and inject SQL queries onto the underlying database. It is possible to leverage this issue to steal database contents including administrator password hashes and user credentials as well as to make attacks against the underlying database.
Exploit / POC
GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
No exploit is required.
The following proof of concept examples are available:
/welcome.asp?page=content_search.asp&search=[SQL]
/welcome.asp?page=content_display.asp&id=[SQL]&category=[SQL]
/welcome.asp?page=category_display.asp&category=[SQL]
/welcome.asp?page=contact_form.asp&id=[SQL]
/checklogin.asp
username: [SQL]
password: [SQL]
/lostpassword.asp
Name: [SQL]
Surname: [SQL]
ID Number: [SQL]
No exploit is required.
The following proof of concept examples are available:
/welcome.asp?page=content_search.asp&search=[SQL]
/welcome.asp?page=content_display.asp&id=[SQL]&category=[SQL]
/welcome.asp?page=category_display.asp&category=[SQL]
/welcome.asp?page=contact_form.asp&id=[SQL]
/checklogin.asp
username: [SQL]
password: [SQL]
/lostpassword.asp
Name: [SQL]
Surname: [SQL]
ID Number: [SQL]
Solution / Fix
GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
GetSolutions GetInternet Multiple SQL Injection Vulnerabilities
References:
References:
- getInternet (Criolabs
- getInternet Product Page (getSolutions)