SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
BID:34970
Info
SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
| Bugtraq ID: | 34970 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1787 CVE-2009-1813 |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2009 12:00AM |
| Updated: | May 07 2015 06:19PM |
| Credit: | ThE g0bL!N |
| Vulnerable: |
SubmitterScript SubmitterScript 2 Kaizenet PHP Dir Submit 0 |
| Not Vulnerable: | |
Discussion
SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
SubmitterScript and PHP Dir Submit are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
SubmitterScript 2 and PHP Dir Submit are vulnerable; other versions may also be affected.
NOTE: BID 35003 (PHP Dir Submit Admin Login SQL Injection Vulnerability) has been determined to be a duplicate of this BID, which has now been updated to include all relevant information. BID 35003 has been retired.
SubmitterScript and PHP Dir Submit are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
SubmitterScript 2 and PHP Dir Submit are vulnerable; other versions may also be affected.
NOTE: BID 35003 (PHP Dir Submit Admin Login SQL Injection Vulnerability) has been determined to be a duplicate of this BID, which has now been updated to include all relevant information. BID 35003 has been retired.
Exploit / POC
SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example is available:
http://www.example.com/admin/
username:' or '1=1
Password:' or '1=1
Attackers can use a browser to exploit this issue.
The following example is available:
http://www.example.com/admin/
username:' or '1=1
Password:' or '1=1
Solution / Fix
SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
SubmitterScript and PHP Dir Submit Admin Login SQL Injection Vulnerability
References:
References:
- Fixed PHP Dir Submit Remote SQL Injection Vulnerability Issue (Kaizenet Ltd)
- PHP Dir Submit Homepage (Kaizenet Ltd)
- SubmitterScript Homepage (SubmitterScript)