|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||||
SecurityAlert : 4287 CVE : CVE-2008-4161 CWE : CWE-89 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Available : Yes
Credit : Neo Anderson & Rohit Bansal Published : 24.09.2008
Advisory Content : ============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ AUTHOR : Neo Anderson & Rohit Bansal DATE : 19th Sept,2008 Email : neo.whizzy@gmail.com & rohitisback@gmail.com ##################################################### # Site : http://www.bctree.com/~assetman # Bug : SQL Injection using Session Fixation Attack # File : search_inv.php # Variable : GET variable 'order_by' ##################################################### # Impact of Vulnerability: By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards. ##################################################### # Bug explanation - Session Fixation Attack/Meta Tag Exploitation: By injecting a custom HTTP header or by injecting a META tag, it is possible to alter the cookies stored in the browser. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site. ##################################################### # PoC: http://127.0.0.1/assetman/search_inv.php?action=search_all&order_by=%3Cmeta +http-equiv='Set-cookie'+content='=value'%3E&order=DESC+limit+1,1-- ##################################################### # GreeTz InfySec , str0ke & EvilFingers www.infysec.com www.evilfingers.com ##################################################### References : http://securityreason.com/expldownload/1/4724/1 (Exploit) http://www.securityfocus.com/bid/31248
http://www.milw0rm.com/exploits/6490
http://secunia.com/advisories/31935  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||||
| Alert | ||
libc:fts_*() Multiple Denial of Service
The fts functions are provided for traversing UNIX file hierarchies... |
||
| Apache |  |
|
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
| PHP | |
|
- 2009-10-02| Copyright © SecurityReason.com. All Rights Reserved. |