what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

deskpro.sql.txt

deskpro.sql.txt
Posted Oct 21, 2003
Authored by Aviram Jenik | Site securiteam.com

DeskPRO v1.1.0 and below do not adequately filter user provided data, allowing a remote attacker to insert malicious SQL statements into existing ones. Allows attackers to login to the system as an administrator without knowing the password.

tags | exploit, remote
SHA-256 | 983ccb3475e6d82e382857c1d96466127ac14546a3310ec3ddb85f10f737178d

deskpro.sql.txt

Change Mirror Download
Multiple SQL Injection Vulnerabilities in DeskPRO
-------------------------------------------------------------------------

Article reference:
http://www.securiteam.com/unixfocus/6R0052K8KM.html

SUMMARY

DeskPRO (http://www.deskpro.com) is "an integrated script to manage your
customer sales and support". The DeskPRO product uses a SQL engine (MySQL) to
store information.
The product contains multiple pages that do not adequately filter our user
provided data, allowing a remote attacker to insert malicious SQL statements
into existing ones.


DETAILS

Vulnerable systems:
 * DeskPRO version 1.1.0 and prior

Immune systems:
 * DeskPRO version 1.1.2

Examples:
http://vulsite.com/deskpro_v1/faq.php?cat=45'
http://vulsite.com/deskpro_v1/faq.php?article=105'
http://vulsite.com/deskpro_v1/view.php?ticketid=1'&ticket_pass=

The vulnerability is better emphasized by the fact that a remote attacker can
logon into the system with the administrator username without knowing the
password by entering the following information in the logon screen:

Email: admin
Password: 'or''='

Vendor response:
On the 21st of Sep 2003 this issue was reported to DeskPRO, the following
reply was received on the same day:
"Thank you for the notification, we will have a fix within 24 hours. We
appreciate keeping the information out of the public domain until we have had
time to fix and release a patch."

On the 2nd of Oct 2003 after the majority of their customers patched the
issue, we have decided to release this advisory.


The information has been provided by SecurITeam Experts
<expert@securiteam.com>.

--
Aviram Jenik
Beyond Security Ltd.
http://www.BeyondSecurity.com
http://www.SecuriTeam.com

Know that you're safe:
http://www.AutomatedScanning.com
Login or Register to add favorites

File Archive:

August 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    15 Files
  • 2
    Aug 2nd
    22 Files
  • 3
    Aug 3rd
    0 Files
  • 4
    Aug 4th
    0 Files
  • 5
    Aug 5th
    15 Files
  • 6
    Aug 6th
    11 Files
  • 7
    Aug 7th
    43 Files
  • 8
    Aug 8th
    0 Files
  • 9
    Aug 9th
    0 Files
  • 10
    Aug 10th
    0 Files
  • 11
    Aug 11th
    0 Files
  • 12
    Aug 12th
    0 Files
  • 13
    Aug 13th
    0 Files
  • 14
    Aug 14th
    0 Files
  • 15
    Aug 15th
    0 Files
  • 16
    Aug 16th
    0 Files
  • 17
    Aug 17th
    0 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close