TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
BID:34386
Info
TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 34386 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2009 12:00AM |
| Updated: | Apr 06 2009 04:26PM |
| Credit: | Christian Weiske |
| Vulnerable: |
Typo3 Store Locator 1.2.6 |
| Not Vulnerable: |
Typo3 Store Locator 1.2.9 Typo3 Store Locator 1.2.8 |
Discussion
TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
The Store Locator ('locator') extension for TYPO3 is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
These issues affect Store Locator 1.2.6 and earlier.
The Store Locator ('locator') extension for TYPO3 is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
These issues affect Store Locator 1.2.6 and earlier.
Exploit / POC
TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
Solution:
The vendor has released updates and an advisory; please see the references for more information.
Solution:
The vendor has released updates and an advisory; please see the references for more information.
References
TYPO3 Store Locator Extension SQL Injection and Cross Site Scripting Vulnerabilities
References:
References:
- Synnefoims Homepage (synnefoims)
- TYPO3 Collective Security Bulletin TYPO3-SA-2009-005 (Typo3)