Maian Uploader Multiple Security Vulnerabilities
BID:65137
Info
Maian Uploader Multiple Security Vulnerabilities
| Bugtraq ID: | 65137 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 24 2014 12:00AM |
| Updated: | Jan 24 2014 12:00AM |
| Credit: | KedAns-Dz |
| Vulnerable: |
Maian Script World Maian Uploader 4.0 |
| Not Vulnerable: | |
Discussion
Maian Uploader Multiple Security Vulnerabilities
Maian Uploader is prone to multiple security vulnerabilities, including:
1. An SQL-injection vulnerability
2. Multiple cross-site scripting vulnerabilities
Attackers can exploit these issues to access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Maian Uploader 4.0 is vulnerable; other versions may also be affected.
Maian Uploader is prone to multiple security vulnerabilities, including:
1. An SQL-injection vulnerability
2. Multiple cross-site scripting vulnerabilities
Attackers can exploit these issues to access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Maian Uploader 4.0 is vulnerable; other versions may also be affected.
Exploit / POC
Maian Uploader Multiple Security Vulnerabilities
An attacker can exploit these issues using a web browser. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following exploit data is available:
An attacker can exploit these issues using a web browser. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following exploit data is available:
Solution / Fix
Maian Uploader Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Maian Uploader Multiple Security Vulnerabilities
References:
References: