CNIL CookieViz 'info.php' SQL Injection Vulnerability

Bugtraq ID:	71010
Class:	Input Validation Error
CVE:	CVE-2014-8351
Remote:	Yes
Local:	No
Published:	Nov 06 2014 12:00AM
Updated:	Nov 06 2014 12:00AM
Credit:	iliketurtles
Vulnerable:	French National Commission On Informatics And Liberty CookieViz 1.0
Not Vulnerable:	French National Commission On Informatics And Liberty CookieViz 1.0.1

CNIL CookieViz 'info.php' SQL Injection Vulnerability

CNIL CookieViz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CNIL CookieViz prior to 1.0 is vulnerable; other versions may also be affected.

CNIL CookieViz 'info.php' SQL Injection Vulnerability

An attacker can exploit the issue using a browser.

The following example URI is available:

http://www.example.com:81/cookie_viz/info.php?domain=*' union all select @@version,2,3,4,5,6,1,load_file('C:\\CookieViz\\conf\\php.ini'),9 -- /**

CNIL CookieViz 'info.php' SQL Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

CNIL CookieViz 'info.php' SQL Injection Vulnerability

References:

• CookieViz Home Page (github)
  
• Patch vulnerabilities : CVE-2014-8352 CVE-2014-8351 (github)
  
• CNIL CookieViz XSS + SQL injection leading to user pwnage (SecLists.Org)