Detections
Analytics
VICIDIAL Call Center Suite admin.php SQL Injection
medium Nessus Plugin ID 38889
Language:
Synopsis
The remote web server contains a PHP script that is prone to a SQL injection attack.Description
The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite.The version of this software installed on the remote host fails to sanitize user-supplied input to the 'PHP_AUTH_USER' and 'PHP_AUTH_PW' variables before using it to construct database queries. Provided VICIDIAL has been configured to support use of non-Latin characters, which is not true by default, an unauthenticated attacker can exploit this issue to manipulate database queries to, for example, bypass authentication and gain administrative access.
Solution
Either apply the patch security_fix_admin_20090522.patch or disable use of non-Latin characters in VICIDIAL.See Also
Plugin Details
Severity: Medium
ID: 38889
File Name: vicidial_admin_sql_injection.nasl
Version: 1.16
Type: remote
Family: CGI abuses
Published: 5/26/2009
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:vicidial:call_center_suite
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Reference Information
CVE: CVE-2009-2234
BID: 35056