Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
BID:64715
Info
Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
| Bugtraq ID: | 64715 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-7139 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2014 12:00AM |
| Updated: | Jan 08 2014 12:00AM |
| Credit: | High-Tech Bridge Security Research Lab. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
Horizon QCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Horizon QCMS 4.0 and prior are vulnerable.
Horizon QCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Horizon QCMS 4.0 and prior are vulnerable.
Exploit / POC
Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
An attacker can exploit this issue through a browser.
Following example URL is available.
http://www.example.com/download.php?category=[SQL]
An attacker can exploit this issue through a browser.
Following example URL is available.
http://www.example.com/download.php?category=[SQL]
Solution / Fix
Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Horizon QCMS 'category' Parameter SQL Injection Vulnerablity
References:
References: