Dora Emlak Script Multiple Input Validation Vulnerabilities

Bugtraq ID:	25004
Class:	Input Validation Error
CVE:	CVE-2007-3989
Remote:	Yes
Local:	No
Published:	Jul 23 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	GeFORC3 is credited with the discovery of these vulnerabilities.
Vulnerable:	Dora Emlak Dora Emlak 1.0
Not Vulnerable:

Dora Emlak Script Multiple Input Validation Vulnerabilities

Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, steal cookie-based authentication credentials, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dora Emlak Script v1.0 is vulnerable.

Dora Emlak Script Multiple Input Validation Vulnerabilities

Attackers can use a browser to exploit these issues.

Sample exploit code has been provided:

• /data/vulnerabilities/exploits/25004.html

Dora Emlak Script Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dora Emlak Script Multiple Input Validation Vulnerabilities

References:

• Dora Emlak Script Web Site (Dora Emlak)