iScripts AutoHoster Multiple Security Vulnerabilities

Bugtraq ID:	64377
Class:	Input Validation Error
CVE:	CVE-2013-7189 CVE-2013-7190
Remote:	Yes
Local:	No
Published:	Dec 15 2013 12:00AM
Updated:	Dec 26 2013 10:20AM
Credit:	Faris (i-Hmx)
Vulnerable:	iScripts Autohoster 0
Not Vulnerable:

iScripts AutoHoster Multiple Security Vulnerabilities

iScripts AutoHoster is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, to execute arbitrary commands or script code in the context of the application, and obtain sensitive information that may aid in further attacks.

iScripts AutoHoster Multiple Security Vulnerabilities

Attackers can exploit these issues using browser.

The following Proof-of-Concepts are available:

• /data/vulnerabilities/exploits/64377.txt

iScripts AutoHoster Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

iScripts AutoHoster Multiple Security Vulnerabilities

References:

• Autohoster (iScripts)
  
• iScripts Homepage (iScripts)