Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
BID:29346
Info
Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 29346 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-6433 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | Russ McRee |
| Vulnerable: |
Blue River Interactive Group Sava CMS 5.0 |
| Not Vulnerable: |
Blue River Interactive Group Sava CMS 5.0.122 |
Discussion
Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
Sava CMS is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Sava CMS 5.0.122 are vulnerable.
Sava CMS is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Sava CMS 5.0.122 are vulnerable.
Exploit / POC
Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice a victim user to follow a malicious URI.
An attacker can exploit these issues via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice a victim user to follow a malicious URI.
Solution / Fix
Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
Solution:
The vendor has released an update. Please see the references for details.
Solution:
The vendor has released an update. Please see the references for details.
References
Sava CMS SQL Injection and Cross-Site Scripting Vulnerabilities
References:
References:
- Sava CMS Homepage (Blue River Interactive Group)