|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 1542 CVE : CVE-2006-4705 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : No Credit : Secaware Research Published : 12.09.2006
Advisory Content : About: Timesheet.php is a PHP application designed to keep track of the hours worked by multiple people on multiple projects. It allows users to log in through their web browser and manage the times that they are clocked on or clocked off. Description: A vulnerability can be found on the file login.php on $_POST['username'] variable. When magic_quotes_gpc is set to Off an intruder can trigger a blind sql injection. Escalation: 1. Disclosure of administrator username and password hash (MD5, PASSWORD) credentials. 2. Remote code execution in case the intruder knows where to save the output of the sql injection on the local path. Solution: Create addslashes function that will filter the $_POST and $_GET variables. Vendor: http://sourceforge.net/projects/tsheet dwayner79 at users.sourceforge.net vexil at users.sourceforge.net Time table: Notified: 09/04/2006 Response: No Response Public disclosure: 09/05/2006 Updates: N/A Credits: Research By: Secaware Research Research Site: http://secaware.blogspot.com Research Mail: secaware2006 at yahoo dot com References: http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.h tml  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |