Invision Power Top Site List < 1.1 RC 2 - SQL Injection

Invision Power Top Site List < 1.1 RC 2 – SQL Injection

漏洞ID 1054417 漏洞类型
发布时间 2004-03-21 更新时间 2004-03-21
图片[1]-Invision Power Top Site List < 1.1 RC 2 - SQL Injection-安全小百科CVE编号 N/A
图片[2]-Invision Power Top Site List < 1.1 RC 2 - SQL Injection-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/43806
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Invision Power Top Site List SQL Injection

Vendor: Invision Power Services
Product: Invision Power Top Site List
Version: <= 1.1 RC 2
Website: http://www.invisiontsl.com/

BID: 9945 

Description:
Invision Power Top Site List is a flexible site ranking script written in PHP, the popular programming choice for web developers. Featuring an impressive feature set with a user-friendly interface your community will feel at home using the system. 

SQL Injection Vulnerability:
Invision Power Top Site List is prone to an SQL Injection vuln in its "comment" feature. This issue is very much exploitable as the injection happens right in the middle of a WHERE statement. Lets have a look at an example error message to get a better idea of what is going on. 

Error: Error executing query

The software returned the following error:

You have an error in your SQL syntax. Check the manual that 
corresponds to your MySQL server version for the right syntax 
to use near '[ Evil_Query ]' at line 1

Query Executed: SELECT * FROM tsl_sites WHERE id = [Evil_Query]

As we can see from this it would be of little difficulty for any attacker to execute arbitrary requests. For example pulling the admin hash and/or possibly taking admin control over an affected Invision Power Top Site List. Below is an example url to show how the issue could be exploited. 

index.php?act=comments&id=[Evil_Query] 

Solution:
The Invision Power Services team were contacted immediately and hopefully a fix will be available soon since this is an application that cost users money to use. 

Credits:
James Bercegay of the GulfTech Security Research Team.

相关推荐: JacoBuddy Chat Module HTML Injection Vulnerability

JacoBuddy Chat Module HTML Injection Vulnerability 漏洞ID 1100755 漏洞类型 Input Validation Error 发布时间 2003-03-01 更新时间 2003-03-01 CVE编号 …

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享