Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
BID:34988
Info
Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
| Bugtraq ID: | 34988 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 15 2009 12:00AM |
| Updated: | May 15 2009 08:56PM |
| Credit: | G4N0K |
| Vulnerable: |
Harlandscripts TShirt Rental Script 0 Harlandscripts Traffic Click 4 Cash Script 0 Harlandscripts Top Hits 0 Harlandscripts Recipe 6.0 Harlandscripts Mug Rental Script 0 Harlandscripts Link Lister Traffic System 0 Harlandscripts Link Back Checker Service Script 0 Harlandscripts Get A Date Script 0 Harlandscripts FFA 0 Harlandscripts Birthsake Keepsake 0 Harlandscripts AD PHP Script 0 |
| Not Vulnerable: | |
Discussion
Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
Multiple Harland Scripts products are prone to multiple input-validation vulnerabilities, including remote command-execution issues, SQL-injection issues, and arbitrary-file-upload issues.
An attacker may exploit these issues to execute arbitrary commands within the context of the affected application, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks may also be possible.
The following products are affected:
Traffic Click 4 Cash Script
Get A Date Script
Birthsake Keepsake
FFA
TShirt Rental Script
Mug Rental script
Top Hits
Recipe 6.0
Link Lister Traffic System
Link Back Checker Service Script
AD PHP Script
Multiple Harland Scripts products are prone to multiple input-validation vulnerabilities, including remote command-execution issues, SQL-injection issues, and arbitrary-file-upload issues.
An attacker may exploit these issues to execute arbitrary commands within the context of the affected application, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks may also be possible.
The following products are affected:
Traffic Click 4 Cash Script
Get A Date Script
Birthsake Keepsake
FFA
TShirt Rental Script
Mug Rental script
Top Hits
Recipe 6.0
Link Lister Traffic System
Link Back Checker Service Script
AD PHP Script
Exploit / POC
Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
Attackers can exploit these issues via a browser.
The following exploit code is available:
Attackers can exploit these issues via a browser.
The following exploit code is available:
Solution / Fix
Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Harland Scripts Products Remote Command Execution and Input Validation Vulnerabilities
References:
References: