BlueSoft Multiple Products Multiple SQL Injection Vulnerabilities

Bugtraq ID:	48703
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 18 2011 12:00AM
Updated:	Jul 18 2011 12:00AM
Credit:	Lazmania61
Vulnerable:	BlueSoft Real Estate Listing CMS 2.0 BlueSoft Classifieds Site Script 0 BlueSoft Auction Site Script 0
Not Vulnerable:

BlueSoft Multiple Products Multiple SQL Injection Vulnerabilities

Multiple BlueSoft products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

BlueSoft Multiple Products Multiple SQL Injection Vulnerabilities

The following example URIs are available:

http://www.example.com/demo5/search.php?realtor=2â??a

http://www.example.com/demo4/item.php?id=94edd43315507ad8509d7bfb2d2bc936â??a

http://www.example.com/demo3/search.php?c=47â??a

BlueSoft Multiple Products Multiple SQL Injection Vulnerabilities

Solution:
Currently, we are not aware of any patches. If you feel we are in error or if you are aware of more recent
information, please mail us at: [email protected]..

BlueSoft Multiple Products Multiple SQL Injection Vulnerabilities

References:

• Vendor Homepage (BlueSoft)