WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
BID:31750
Info
WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
| Bugtraq ID: | 31750 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-4732 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2008 12:00AM |
| Updated: | Apr 16 2015 05:52PM |
| Credit: | g30rg3_x |
| Vulnerable: |
Jason DeVelvis WP Comment Remix 1.4.3 |
| Not Vulnerable: |
Jason DeVelvis WP Comment Remix 1.4.4 |
Discussion
WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
WP Comment Remix is prone to an SQL-injection issue and multiple HTML-injection issues because it fails to properly sanitize user-supplied input.
An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
WP Comment Remix 1.4.3 is vulnerable; other versions may also be affected.
WP Comment Remix is prone to an SQL-injection issue and multiple HTML-injection issues because it fails to properly sanitize user-supplied input.
An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
WP Comment Remix 1.4.3 is vulnerable; other versions may also be affected.
Exploit / POC
WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
An attacker can exploit these issues through a browser.
The following exploit code is available:
An attacker can exploit these issues through a browser.
The following exploit code is available:
Solution / Fix
WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
WP Comment Remix 1.4.3 SQL Injection and HTML Injection Vulnerabilities
References:
References:
- WP Comment Remix 1.4.3 Multiple Vulnerabilities (g30rg3_x
- WP Comment Remix Homepage (Jason DeVelvis)