INCOGEN Bugport Multiple SQL Injection Vulnerabilities
BID:16121
Info
INCOGEN Bugport Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 16121 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 03 2006 12:00AM |
| Updated: | Jan 03 2006 12:00AM |
| Credit: | r0t is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
INCOGEN BugPort 1.134 INCOGEN BugPort 1.133 INCOGEN BugPort 1.129 INCOGEN BugPort 1.125 INCOGEN BugPort 1.119 INCOGEN BugPort 1.117 INCOGEN BugPort 1.109 INCOGEN BugPort 1.108 INCOGEN BugPort 1.101 INCOGEN BugPort 1.099 INCOGEN BugPort 1.098 INCOGEN BugPort 1.097 INCOGEN BugPort 1.096 INCOGEN BugPort 1.095 INCOGEN BugPort 1.094 INCOGEN BugPort 1.093 INCOGEN BugPort 1.092 INCOGEN BugPort 1.091 INCOGEN BugPort 1.090 |
| Not Vulnerable: | |
Discussion
INCOGEN Bugport Multiple SQL Injection Vulnerabilities
Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
INCOGEN Bugport Multiple SQL Injection Vulnerabilities
An exploit is not required.
Example URI have been provided:
http://www.example.com/index.php?view=DevelopmentItemResultsView&devWherePair
%5B0%5D=state_id+%3C+%3F++AND++MATCH+%28report%2Csubject%2Cdevelplan%2Cfixednotes%2Crepsteps%29+AGAINST+%28%3F++IN+BOOLEAN+MODE%29&devWherePair%5B1%5D%5B0%5D=[SQL]
http://www.example.com/index.php?view=DevelopmentItemResultsView&where=project
_id+%3D+%3F&orderBy=[SQL]
http://www.example.com/index.php?view=DevelopmentItemResultsView&where=[SQL]
An exploit is not required.
Example URI have been provided:
http://www.example.com/index.php?view=DevelopmentItemResultsView&devWherePair
%5B0%5D=state_id+%3C+%3F++AND++MATCH+%28report%2Csubject%2Cdevelplan%2Cfixednotes%2Crepsteps%29+AGAINST+%28%3F++IN+BOOLEAN+MODE%29&devWherePair%5B1%5D%5B0%5D=[SQL]
http://www.example.com/index.php?view=DevelopmentItemResultsView&where=project
_id+%3D+%3F&orderBy=[SQL]
http://www.example.com/index.php?view=DevelopmentItemResultsView&where=[SQL]
Solution / Fix
INCOGEN Bugport Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
INCOGEN Bugport Multiple SQL Injection Vulnerabilities
References:
References:
- BugPort Homepage (INCOGEN)
- BugPort Multiple vuln. (r0t)