DUware DUforum Multiple SQL Injection Vulnerabilities
BID:14035
Info
DUware DUforum Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 14035 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2005 12:00AM |
| Updated: | Dec 04 2006 04:44PM |
| Credit: | dedi dwianto <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
DUWare DUportal Pro 3.4.3 DUWare DUforum 3.1 DUWare DUforum 3.0 |
| Not Vulnerable: | |
Discussion
DUware DUforum Multiple SQL Injection Vulnerabilities
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Exploit / POC
DUware DUforum Multiple SQL Injection Vulnerabilities
No exploit is required.
The following proof-of-concept URIs are available:
http://www.example.com/DUforum/messages.asp?iMsg=[SQL Inject]248&iFor=6
http://www.example.com/DUforum/post.asp?iFor=6[SQL Inject]
http://www.example.com/DUforum/forums.asp?iFor=[SQL Inject]
http://www.example.com/DUforum/admin/userEdit.asp?id=[SQL Inject]
No exploit is required.
The following proof-of-concept URIs are available:
http://www.example.com/DUforum/messages.asp?iMsg=[SQL Inject]248&iFor=6
http://www.example.com/DUforum/post.asp?iFor=6[SQL Inject]
http://www.example.com/DUforum/forums.asp?iFor=[SQL Inject]
http://www.example.com/DUforum/admin/userEdit.asp?id=[SQL Inject]
Solution / Fix
DUware DUforum Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
DUware DUforum Multiple SQL Injection Vulnerabilities
References:
References:
- DUware Homepage (DUware)
- [Aria-Security Team] DuWare DuForum SQL Injection Vuln (Aria-Security)
- [ECHO_ADV_19$2005] Multiple SQL INJECTION in DUWARE Products (dedi dwianto