TCMS Multiple Input Validation Vulnerabilities
BID:42766
Info
TCMS Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 42766 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 26 2010 12:00AM |
| Updated: | Aug 26 2010 12:00AM |
| Credit: | High-Tech Bridge SA |
| Vulnerable: |
Target CMS TCMS 0 |
| Not Vulnerable: | |
Discussion
TCMS Multiple Input Validation Vulnerabilities
TCMS is prone to multiple input-validation vulnerabilities, including a local file-include vulnerability, a local file-disclosure vulnerability, multiple SQL-injection vulnerabilities, and multiple cross-site scripting vulnerabilities.
An attacker can exploit these vulnerabilities to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, obtain potentially sensitive information, or execute arbitrary local scripts in the context of the webserver process; other attacks are also possible.
TCMS is prone to multiple input-validation vulnerabilities, including a local file-include vulnerability, a local file-disclosure vulnerability, multiple SQL-injection vulnerabilities, and multiple cross-site scripting vulnerabilities.
An attacker can exploit these vulnerabilities to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, obtain potentially sensitive information, or execute arbitrary local scripts in the context of the webserver process; other attacks are also possible.
Exploit / POC
TCMS Multiple Input Validation Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URIs are available:
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URIs are available:
Solution / Fix
TCMS Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
TCMS Multiple Input Validation Vulnerabilities
References:
References:
- Target CMS Homepage (Target CMS)
- File Content Disclosure in TCMS ([email protected])
- Local File Inclusion in TCMS ([email protected])
- SQL injection vulnerability in TCMS ([email protected])
- SQL injection vulnerability in TCMS ([email protected])
- SQL injection vulnerability in TCMS ([email protected])
- SQL injection vulnerability in TCMS ([email protected])
- SQL injection vulnerability in TCMS ([email protected])
- XSS vulnerability in TCMS ([email protected])
- XSS vulnerability in TCMS ([email protected])