51 matches found
CVE-2005-0411
CVE-2005-0411 affects CitrusDB up to version 0.3.6 (and earlier). The vulnerability is a directory-traversal in index.php where the GET parameter load can include arbitrary local PHP files via .. sequences, enabling remote attackers and local users to include PHP files. The issue is documented wi...
CVE-2005-0408
CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the idhash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the "boogaadeeboo" string, which is hard-coded in th...
CVE-2005-0410
CVE-2005-0410 affects CitrusDB up to version 0.3.6, where importcc.php is vulnerable to SQL injection via fields in uploaded CSV data. This allows remote attackers to inject data into the database through crafted CSV files. Evidence from multiple sources confirms the vulnerability exists in Citru...
CVE-2005-0409
CVE-2005-0409 affects CitrusDB 0.3.6 and earlier. The vulnerability arises because importcc.php and uploadcc.php do not perform proper authorization checks, allowing remote attackers to upload credit card data and learn the pathnames of temporary files storing that data, which can facilitate acce...
CVE-2005-0411
Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. dot dot sequences in the load parameter...
CVE-2005-0408
CitrusDB 0.3.6 and earlier uses an authentication cookie id_hash which is md5(user_name + 'boogaadeeboo'); because id_hash is derived from the username with a hard-coded suffix, an attacker who knows a valid username can compute the MD5 and forge the cookie to bypass authentication and gain privi...
CitrusDB Static id_hash Admin Authentication Bypass
The remote host is running CitrusDB, an open source customer database application written in PHP. The version of CitrusDB installed on the remote host uses as an authentication cookie the MD5 checksum of a username followed by the constant 'boogaadeeboo'. Knowing a valid username on the remote...
[Full-Disclosure] Advisory: SQL-Injection in CitrusDB
Advisory: SQL-Injection in CitrusDB A group of students at our lab called RedTeam found an SQL-Injection vulnerability in CitrusDB. Details ======= Product: CitrusDB Affected Version: 0.3.6 verified, probably = 0.3.5, too Immune Version: none OS affected: all Security-Risk: low Remote-Exploit: no...
[Full-Disclosure] Advisory: Directory traversal in CitrusDB
Advisory: Directory traversal in CitrusDB RedTeam found a directory traversal vulnerability in CitrusDB which results in inclusion of any accessible local .php file. Details ======= Product: CitrusDB Affected Version: 0.3.6, probably = 0.3.5, too Immune Version: none 2005-02-03 OS affected: all...
CitrusDB 0.3.6 - 'importcc.php' CSV File SQL Injection
source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue exists because the application fails to verify user...
CitrusDB 0.3.6 - 'uploadcc.php' Arbitrary Database Injection
source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue exists because the application fails to verify user...
CitrusDB 0.3.6 - importcc.php Arbitrary Database Injection
CitrusDB 0.3.6 - importcc.php Arbitrary Database Injection source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The...
CitrusDB 0.3.6 - uploadcc.php Arbitrary Database Injection
CitrusDB 0.3.6 - uploadcc.php Arbitrary Database Injection source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The...
CitrusDB 0.3.6 - 'importcc.php' Arbitrary Database Injection
source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue exists because the application fails to verify user...
CitrusDB 0.3.6 - importcc.php CSV File SQL Injection
CitrusDB 0.3.6 - importcc.php CSV File SQL Injection source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue...
CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion
CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion source: https://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This...
[Full-Disclosure] Advisory: Authentication bypass in CitrusDB
Advisory: Authentication bypass in CitrusDB A group of Students in our lab called RedTeam found an authentication bypass vulnerability in CitrusDB which can result in complete corruption of the installed CitrusDB application. Details ======= Product: CitrusDB Affected Version: 0.3.6 verified,...
[Full-Disclosure] Advisory: Upload Authorization bypass in CitrusDB
Advisory: Upload Authorization bypass in CitrusDB A group of students at our lab called RedTeam found an authorization bypass vulnerability in CitrusDB which results in upload of fake credit card data, SQL-Injection and disclosure of credit card data. Details ======= Product: CitrusDB Affected...
CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion
source: https://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This issue is reported to affect CitrusDB 0.3.6; earlier...