by r0t,der4444,cembo,VietMafia

Monday, November 28, 2005

WSN Knowledge Base SQL inj. vuln.

WSN Knowledge Base SQL inj. vuln.
Vuln. dicovered by : r0t
Date: 28 nov. 2005
Vendor:http://scripts.webmastersite.net/wsnkb/
affected version: 1.2.0 and prior

Product Description:
All pages (even admin panel) entirely customizable via the template system. Add custom templates, change where users are sent on redirects after actions, add new fields (and make them searchable). Use file attachments (as many as needed), show thumbnails of images. Member system can integrate with forums and other mysql. Advanced usergroup permissions. Visitors may rate, email, save, and discuss each article. Search engine friendly URLs option and static HTML file generation.

Vuln. description:
Input passed to the "catid" , "perpage", "ascdesc" ,"orderlinks" parameter in "index.php" and "id" parameter in "comments.php" and "memberlist.php" isn't properly sanitised before being used in a SQL query.This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.


examples:

/index.php?action=displaycat&catid=1[SQL]

/index.php?todo=orderlinks&action=displaycat&
catid=1&orderlinks=id&ascdesc=desc&perpage=1[SQL]

/index.php?todo=orderlinks&action=displaycat&
catid=1&orderlinks=id&ascdesc=1[SQL]

/index.php?todo=orderlinks&action=displaycat&
catid=1&orderlinks=[SQL]

/comments.php?id=[SQL]

/memberlist.php?action=profile&id=1[SQL]

Solution:
Edit the source code to ensure that input is properly sanitised.

1 Comments:

Anonymous Anonymous told...

Duplicate content, web scraping auto bots, article generation software and article spinning. It seems every scaremonger and opportunist has jumped on the article writing band wagon. I still feel that article writing and article marketing are in their infancy - there is much more benefit to be derived from article writing. None of my web sites have suffered from the alleged, duplicate content filter or penalty - very much the opposite. The Article Writing blog is on course to become the number one source of information on article writing and marketing.

9:57 AM

 

Post a Comment

<< Home

 
Copyright (c) 2006 Pridels Sec Crew