Auxilium PetRatePro Multiple Security Vulnerabilities
BID:55580
Info
Auxilium PetRatePro Multiple Security Vulnerabilities
| Bugtraq ID: | 55580 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 14 2012 12:00AM |
| Updated: | Sep 14 2012 12:00AM |
| Credit: | DaOne |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Auxilium PetRatePro Multiple Security Vulnerabilities
Auxilium PetRatePro is prone to the following vulnerabilities because it fails to sanitize user-supplied data:
1. A cross-site request-forgery vulnerability
2. An SQL-injection vulnerability
3. An arbitrary-file-upload vulnerability
Exploiting these issues could allow an attacker to perform certain unauthorized actions and gain access to the affected application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Auxilium PetRatePro is prone to the following vulnerabilities because it fails to sanitize user-supplied data:
1. A cross-site request-forgery vulnerability
2. An SQL-injection vulnerability
3. An arbitrary-file-upload vulnerability
Exploiting these issues could allow an attacker to perform certain unauthorized actions and gain access to the affected application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
Auxilium PetRatePro Multiple Security Vulnerabilities
An attacker can use a browser to exploit these issues.
The following example data and exploit code are available:
An attacker can use a browser to exploit these issues.
The following example data and exploit code are available:
Solution / Fix
Auxilium PetRatePro Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Auxilium PetRatePro Multiple Security Vulnerabilities
References:
References: