Dir2web Multiple Security Vulnerabilities
BID:54845
Info
Dir2web Multiple Security Vulnerabilities
| Bugtraq ID: | 54845 |
| Class: | Unknown |
| CVE: |
CVE-2012-4070 CVE-2012-4069 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 07 2012 12:00AM |
| Updated: | Aug 07 2012 12:00AM |
| Credit: | Daniel Correa |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Dir2web Multiple Security Vulnerabilities
Dir2web is prone to multiple security vulnerabilities, including an SQL-Injection vulnerability and an information-disclosure vulnerability.
Successfully exploiting these issues allows remote attackers to compromise the software, retrieve information, modify data, disclose sensitive information, or gain unauthorized access; other attacks are also possible.
Dir2web versions 3.0 is vulnerable; other versions may also be affected.
Dir2web is prone to multiple security vulnerabilities, including an SQL-Injection vulnerability and an information-disclosure vulnerability.
Successfully exploiting these issues allows remote attackers to compromise the software, retrieve information, modify data, disclose sensitive information, or gain unauthorized access; other attacks are also possible.
Dir2web versions 3.0 is vulnerable; other versions may also be affected.
Exploit / POC
Dir2web Multiple Security Vulnerabilities
Attackers can use a browser to exploit these issues.
The following example URI is available:
http://www.example.com/index.php?wpid=homepage&oid=6a303a0aaa' OR id > 0-- -
Attackers can use a browser to exploit these issues.
The following example URI is available:
http://www.example.com/index.php?wpid=homepage&oid=6a303a0aaa' OR id > 0-- -
Solution / Fix
Dir2web Multiple Security Vulnerabilities
Solution:
Vendor patch is available. Please see the references for more information.
Solution:
Vendor patch is available. Please see the references for more information.
References
Dir2web Multiple Security Vulnerabilities
References:
References: