eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities

Bugtraq ID:	50419
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 28 2011 12:00AM
Updated:	Oct 28 2011 12:00AM
Credit:	Vulnerability Research Laboratory - Mohammed Abdelkader A
Vulnerable:	eFront eFront 3.6.10
Not Vulnerable:	eFront eFront 3.6.10 Build 12151

eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities

eFront is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

eFront 3.6.10 is vulnerable; other versions may also be affected.

eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available.

http://www.example.com/enterprise/www/professor.php?ctg=survey&action=preview&surveys_ID=1+and%201=0--

http://www.example.com/enterprise/www/professor.php?ctg=survey&action=preview&surveys_ID=1+and%201=1--

eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities

References:

• eFront 3.6.10 build 12151 (eFront)
  
• eFront Enterprise v3.6.10 - Multiple Remote Vulnerabilities (eFront)
  
• eFront Homepage (eFront)