GeodesicSolutions Products Multiple SQL Injection Vulnerabilities

Bugtraq ID:	19093
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 20 2006 12:00AM
Updated:	Jul 20 2006 10:32PM
Credit:	Discovery is credited to LBDT.
Vulnerable:	GeodesicSolutions GeoClassifieds Basic 2.0.3 GeodesicSolutions GeoAuctions Premier 2.0.3 GeodesicSolutions GeoAuctions Enterprise 1.0.6
Not Vulnerable:

GeodesicSolutions Products Multiple SQL Injection Vulnerabilities

GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query.

A successful attack could allow an attacker to compromise the software, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Note that these vulnerabilities occur only when the 'accumulative feedback' feature is turned on.

GeodesicSolutions Products Multiple SQL Injection Vulnerabilities

Attackers can exploit these issues via a web client.

• /data/vulnerabilities/exploits/geoauctions-mult-sql-inj.txt

GeodesicSolutions Products Multiple SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

GeodesicSolutions Products Multiple SQL Injection Vulnerabilities

References:

• [NewAngels Advisory #12] GeoAuctions Enterprise & Others - Blind SQL Injection V (NewAngels Team)
  
• GeoAuctions Web Site (GeodesicSolutions)