Car Rental Script Multiple Input Validation Vulnerabilities
BID:64959
Info
Car Rental Script Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 64959 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2014 12:00AM |
| Updated: | Jan 13 2014 12:00AM |
| Credit: | HackXBack |
| Vulnerable: |
PHP Jabbers Car Rental Script 0 |
| Not Vulnerable: | |
Discussion
Car Rental Script Multiple Input Validation Vulnerabilities
Car Rental Script is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database or perform unauthorized actions. Other attacks are also possible.
Car Rental Script is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database or perform unauthorized actions. Other attacks are also possible.
Exploit / POC
Car Rental Script Multiple Input Validation Vulnerabilities
An attacker can exploit these issue through a browser. To exploit cross-site scripting and cross-site request forgery issues an attacker must trick an unsuspecting victim into following a malicious URI.
The following example data is available:
An attacker can exploit these issue through a browser. To exploit cross-site scripting and cross-site request forgery issues an attacker must trick an unsuspecting victim into following a malicious URI.
The following example data is available:
Solution / Fix
Car Rental Script Multiple Input Validation Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Car Rental Script Multiple Input Validation Vulnerabilities
References:
References:
- Car Rental Script Homepage (PHP Jabbers)