NX5Linkx Multiple SQL Injection Vulnerabilities
BID:20010
CVE-2006-4504 |Info
NX5Linkx Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 20010 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-4504 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2006 12:00AM |
| Updated: | Sep 14 2006 07:52PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
NX5 NX5Linkx 1.0 |
| Not Vulnerable: | |
Discussion
NX5Linkx Multiple SQL Injection Vulnerabilities
NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
An attacker may be able to exploit these issues to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.
NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
An attacker may be able to exploit these issues to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.
Exploit / POC
NX5Linkx Multiple SQL Injection Vulnerabilities
Attackers can exploit these issues via a web client.
The following proof-of-concept URIs are avaiable:
http://www.example.com/links.php? c=999'% 20union%20select% 201,222
http://www.example.com/out.php? l=999' union select 1,1,'http://www.example.com', 1,1,1,1
Attackers can exploit these issues via a web client.
The following proof-of-concept URIs are avaiable:
http://www.example.com/links.php? c=999'% 20union%20select% 201,222
http://www.example.com/out.php? l=999' union select 1,1,'http://www.example.com', 1,1,1,1
Solution / Fix
NX5Linkx Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
NX5Linkx Multiple SQL Injection Vulnerabilities
References:
References:
- NX5 Homepage (NX5)
- [eVuln] NX5Linkx Multiple Vulnerabilities (Alex)