Detections
Analytics
Log Rover pword Parameter SQL Injection
high Nessus Plugin ID 40331
Language:
Synopsis
The remote web server contains an ASP script that is prone to a SQL injection attack.Description
The remote host is running Log Rover, an ASP application for analyzing web server log files.The web interface included with the version of Log Rover installed on the remote host fails to sanitize user-supplied input to the 'pword' parameter of the 'login.asp' script before using it to construct database queries. An unauthenticated attacker may be able to exploit this issue to manipulate database queries, leading to disclosure of sensitive information or attacks against the underlying database.
Note that the 'uname' parameter is also likely to be similarly affected, although Nessus has not checked for that.
Solution
Unknown at this time.See Also
https://www.securityfocus.com/archive/1/504869/30/0/threaded
Plugin Details
Severity: High
ID: 40331
File Name: logrover_pword_sql_injection.nasl
Version: 1.13
Type: remote
Family: CGI abuses
Published: 7/20/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:logrover:logrover
Required KB Items: www/ASP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 7/13/2009
Reference Information
CVE: CVE-2009-3532
BID: 43600