Subdreamer Multiple Remote SQL Injection Vulnerabilities
BID:15238
Info
Subdreamer Multiple Remote SQL Injection Vulnerabilities
| Bugtraq ID: | 15238 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 29 2005 12:00AM |
| Updated: | Oct 29 2005 12:00AM |
| Credit: | Discovery is credited to Rush Security Team. |
| Vulnerable: |
Subdreamer Subdreamer 2.2.1 |
| Not Vulnerable: | |
Discussion
Subdreamer Multiple Remote SQL Injection Vulnerabilities
Subdreamer is prone to multiple remote SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Subdreamer 2.2.1 is reported to be vulnerable. Other versions may be affected as well.
Subdreamer is prone to multiple remote SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Subdreamer 2.2.1 is reported to be vulnerable. Other versions may be affected as well.
Exploit / POC
Subdreamer Multiple Remote SQL Injection Vulnerabilities
No exploit is required.
The following proof of concept is available:
No exploit is required.
The following proof of concept is available:
Solution / Fix
Subdreamer Multiple Remote SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Subdreamer Multiple Remote SQL Injection Vulnerabilities
References:
References:
- RST/GHC Advisory#35 (Rush Security Team
) - Subdreamer Homepage (Subdreamer)