eLMS Pro 'subscribe.php' SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	40677
Class:	Input Validation Error
CVE:	CVE-2010-2354 CVE-2010-2356
Remote:	Yes
Local:	No
Published:	Jun 09 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Sid3^effects
Vulnerable:	Pilot Group eLMS Pro 0
Not Vulnerable:

eLMS Pro 'subscribe.php' SQL Injection and Cross Site Scripting Vulnerabilities

eLMS Pro is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

eLMS Pro 'subscribe.php' SQL Injection and Cross Site Scripting Vulnerabilities

The following example URIs are available:

http://www.example.com/subscribe.php?course_id=[sqli]
http://www.example.com/subscribe.php?course_id=[XSS]

eLMS Pro 'subscribe.php' SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

eLMS Pro 'subscribe.php' SQL Injection and Cross Site Scripting Vulnerabilities

References:

• eLMS Pro - Homepage (Pilot Group)