ASP-Rider Remote SQL Injection Vulnerability
BID:11933
Info
ASP-Rider Remote SQL Injection Vulnerability
| Bugtraq ID: | 11933 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2004 12:00AM |
| Updated: | Dec 14 2004 12:00AM |
| Credit: | Shervin Khaleghjou <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
ASP-Rider ASP-Rider |
| Not Vulnerable: | |
Discussion
ASP-Rider Remote SQL Injection Vulnerability
A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.
An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.
A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.
An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption.
Exploit / POC
ASP-Rider Remote SQL Injection Vulnerability
No exploit is required to leverage this issue. The following proof of concept has been provided. It will allow an attacker to bypass the required authentication for administrator access to the affected application.
http://www.example.com/weblog/blogadmin/verify.asp?username='union select 1,1,1,1,1,1,1,1 from tbl_users where ''='&password=1
No exploit is required to leverage this issue. The following proof of concept has been provided. It will allow an attacker to bypass the required authentication for administrator access to the affected application.
http://www.example.com/weblog/blogadmin/verify.asp?username='union select 1,1,1,1,1,1,1,1 from tbl_users where ''='&password=1
Solution / Fix
ASP-Rider Remote SQL Injection Vulnerability
Solution:
It is reported that this issue has been resolved in the latest release of the affected software, although this has not been verified. Please contact the vendor for more information on obtaining the fixed packages.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that this issue has been resolved in the latest release of the affected software, although this has not been verified. Please contact the vendor for more information on obtaining the fixed packages.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ASP-Rider Remote SQL Injection Vulnerability
References:
References:
- ASP-Rider Web Blog Homepage (ASP-Rider)
- ASP-rider is vulnerable to sql injection attack (shervin khaleghjou