Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:12296
HistoryApr 19, 2006 - 12:00 a.m.

Plexum X5 SQL vuln.

2006-04-1900:00:00
vulners.com
6

Plexum X5 SQL vuln.

###############################################
Vuln. discovered by : r0t
Date: 19 april 2006
vendorlink:http://www.plexum.com/network/
affected versions:X5 and previous
orginal advisory:http://pridels.blogspot.com/2006/04/plexum-x5-sql-vuln.html
###############################################

Vuln. Description:

Plexum contains a flaw that allows a remote sql injection
attacks.Inputpassed to the "pagesize","maxrec","startpos" parameters
in "
plexum.php" isn't properly sanitised before being used in a SQL query. This
can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

examples:

/plexum.php?section=webstats&page=hits&startpos
=15&maxrec=457&pagesize=[SQL]

/plexum.php?section=webstats&page=hits&startpos
=450&maxrec=[SQL]

/plexum.php?section=webstats&page=hits&startpos
=[SQL]

###############################################
Solution:
Edit the source code to ensure that input is properly sanitised.
###############################################
More information @ unsecured-systems.com/forum/