BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
BID:45121
Info
BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 45121 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3266 CVE-2010-3267 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2010 12:00AM |
| Updated: | Nov 30 2010 09:25PM |
| Credit: | BugTracker.NET team |
| Vulnerable: |
Bugtracker.NET Bugtracker.NET 3.4.4 |
| Not Vulnerable: |
Bugtracker.NET Bugtracker.NET 3.4.5 |
Discussion
BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
BugTracker.NET v3.4.4 is vulnerable; other versions may be affected.
BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
BugTracker.NET v3.4.4 is vulnerable; other versions may be affected.
Exploit / POC
BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URI is available:
http://www.example.com/edit_comment.aspx?id=48&bug_id=3%3E%3Cscript%3Ealert%28%27%27%29;%3C/script%3E
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URI is available:
http://www.example.com/edit_comment.aspx?id=48&bug_id=3%3E%3Cscript%3Ealert%28%27%27%29;%3C/script%3E
Solution / Fix
BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
BugTracker.NET SQL Injection and Cross Site Scripting Vulnerabilities
References:
References:
- BugTracker.NET Homepage (BugTracker.NET)
- Multiple vulnerabilities in BugTracker.Net (Core Security Technologies)