SearchBlox Multiple Security Vulnerabilities
BID:74059
Info
SearchBlox Multiple Security Vulnerabilities
| Bugtraq ID: | 74059 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0968 CVE-2015-0967 CVE-2015-0969 CVE-2015-0970 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Apr 14 2015 12:00AM |
| Credit: | Ashish Kamble of Qualys. |
| Vulnerable: |
SearchBlox SearchBlox 8.1 |
| Not Vulnerable: |
SearchBlox SearchBlox 8.2 |
Discussion
SearchBlox Multiple Security Vulnerabilities
SearchBlox is prone to the following security vulnerabilities:
1. A cross-site scripting vulnerability
2. An HTML-injection vulnerability
3. An arbitrary file-upload vulnerability
4. An information-disclosure vulnerability
5. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials, upload arbitrary files, execute arbitrary code. This may aid in further attacks.
SearchBlox 8.1.x through 8.2 are vulnerable.
SearchBlox is prone to the following security vulnerabilities:
1. A cross-site scripting vulnerability
2. An HTML-injection vulnerability
3. An arbitrary file-upload vulnerability
4. An information-disclosure vulnerability
5. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials, upload arbitrary files, execute arbitrary code. This may aid in further attacks.
SearchBlox 8.1.x through 8.2 are vulnerable.