Hosting Controller Multiple SQL Injection Vulnerabilities
BID:14258
Info
Hosting Controller Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 14258 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2005 12:00AM |
| Updated: | Jul 13 2005 12:00AM |
| Credit: | Soroush Dalili <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1 Hotfix 2.1 Hosting Controller Hosting Controller 6.1 Hotfix 2.0 Hosting Controller Hosting Controller 6.1 Hotfix 1.9 Hosting Controller Hosting Controller 6.1 Hotfix 1.7 Hosting Controller Hosting Controller 6.1 Hotfix 1.4 Hosting Controller Hosting Controller 6.1 Hosting Controller Hosting Controller 1.4.1 Hosting Controller Hosting Controller 1.4 b Hosting Controller Hosting Controller 1.4 Hosting Controller Hosting Controller 1.3 Hosting Controller Hosting Controller 1.1 |
| Not Vulnerable: | |
Discussion
Hosting Controller Multiple SQL Injection Vulnerabilities
Hosting Controller is prone to an SQL injection vulnerability.
This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query.
Hosting Controller is prone to an SQL injection vulnerability.
This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query.
Exploit / POC
Hosting Controller Multiple SQL Injection Vulnerabilities
The following demonstration exploit value is provided.
One may input this string into the search box on the affected pages:
'or'1'='1'or'1'='1
The following demonstration exploit value is provided.
One may input this string into the search box on the affected pages:
'or'1'='1'or'1'='1
Solution / Fix
Hosting Controller Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Hosting Controller Multiple SQL Injection Vulnerabilities
References:
References:
- Hosting Controller Homepage (Hosting Controller)