Detections
Analytics
ReviewPost PHP Pro Multiple Script SQL Injections
high Nessus Plugin ID 12042
Language:
Synopsis
The remote web server contains a PHP application that is prone to multiple SQL injection attacks.Description
ReviewPost PHP Pro, a web-based software that manages user's opinions, is installed on the remote web server.The installed version fails to sanitize user input to the 'product' parameter of the 'showproduct.php' script and the 'cat' parameter of the 'showcat.php' script before using it in a database query. An unauthenticated attacker can leverage these issues to manipulate such queries to disclose sensitive information and gain administrative access to the application.
Solution
Contact the vendor for a patch.See Also
https://www.securityfocus.com/archive/1/352598/30/0/threaded
Plugin Details
Severity: High
ID: 12042
File Name: reviewpost_sql.nasl
Version: 1.25
Type: remote
Family: CGI abuses
Published: 2/4/2004
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Vulnerability Publication Date: 2/4/2004
Reference Information
CVE: CVE-2004-2175