BabyGekko Multiple Input Validation Vulnerabilities
BID:56523
CVE-2012-5698 | CVE-2012-5699 |Info
BabyGekko Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 56523 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-5698 CVE-2012-5699 CVE-2012-5700 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 14 2012 12:00AM |
| Updated: | Nov 14 2012 12:00AM |
| Credit: | High-Tech Bridge Security |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
BabyGekko Multiple Input Validation Vulnerabilities
BabyGekko is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include:
1. Multiple SQL-injection vulnerabilities
2. A local file-include vulnerability
3. Multiple cross-site scripting vulnerabilities
Exploiting these issues could allow the attacker to execute arbitrary local files, obtain sensitive information, steal cookie-based authentication credentials, compromise the application, access or modify data, and exploit latent vulnerabilities in the underlying database.
BabyGekko is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include:
1. Multiple SQL-injection vulnerabilities
2. A local file-include vulnerability
3. Multiple cross-site scripting vulnerabilities
Exploiting these issues could allow the attacker to execute arbitrary local files, obtain sensitive information, steal cookie-based authentication credentials, compromise the application, access or modify data, and exploit latent vulnerabilities in the underlying database.
Exploit / POC
BabyGekko Multiple Input Validation Vulnerabilities
An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must trick an unsuspecting victim into following a malicious URI.
Example URLs are available. Please see the references for further information.
An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must trick an unsuspecting victim into following a malicious URI.
Example URLs are available. Please see the references for further information.
Solution / Fix
BabyGekko Multiple Input Validation Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
BabyGekko Multiple Input Validation Vulnerabilities
References:
References: