|
Plexum X5 SQL vuln.
###############################################
Vuln. discovered by : r0t
Date: 19 april 2006
vendorlink:http://www.plexum.com/network/
affected versions:X5 and previous
orginal advisory:http://pridels.blogspot.com/2006/04/plexum-x5-sql-vuln.html
###############################################
Vuln. Description:
Plexum contains a flaw that allows a remote sql injection
attacks.Inputpassed to the "pagesize","maxrec","startpos" parameters
in "
plexum.php" isn't properly sanitised before being used in a SQL query. This
can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
examples:
/plexum.php?section=webstats&page=hits&startpos
=15&maxrec=457&pagesize=[SQL]
/plexum.php?section=webstats&page=hits&startpos
=450&maxrec=[SQL]
/plexum.php?section=webstats&page=hits&startpos
=[SQL]
###############################################
Solution:
Edit the source code to ensure that input is properly sanitised.
###############################################
More information @ unsecured-systems.com/forum/
|
