osCMax Multiple SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	52886
Class:	Input Validation Error
CVE:	CVE-2012-1664 CVE-2012-1665
Remote:	Yes
Local:	No
Published:	Apr 04 2012 12:00AM
Updated:	Apr 04 2012 12:00AM
Credit:	High-Tech Bridge SA Security Research Lab
Vulnerable:	osCMax osCMax 2.5
Not Vulnerable:	osCMax osCMax 2.5.1

osCMax Multiple SQL Injection and Cross Site Scripting Vulnerabilities

osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

osCMax 2.5.0 is vulnerable; prior versions may also be affected.

osCMax Multiple SQL Injection and Cross Site Scripting Vulnerabilities

Attackers can use a browser to exploit the SQL-injection issues. To exploit the cross-site scripting issue, an attacker must trick a victim into following a malicious URI.

The following example data is available:

• /data/vulnerabilities/exploits/52886.txt

osCMax Multiple SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references for more details.

osCMax Multiple SQL Injection and Cross Site Scripting Vulnerabilities

References:

• Multiple vulnerabilities in osCmax (High-Tech Bridge SA Security Research Lab)
  
• osCMax Homepage (osCMax)
  
• Multiple vulnerabilities in osCmax ([email protected])