[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
- To: bugtraq <bugtraq@xxxxxxxxxxxxxxxxx>
- Subject: LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
- From: muuratsalo experimental hack lab <muuratsalo@xxxxxxxxx>
- Date: Tue, 8 Nov 2011 19:33:29 +0100
Dear All,
I have found multiple sql injection vulnerabilities in LabStoRe <= 1.5.4.
The vendor knows the vulnerabilities and he is fixing them as stated
in the enclosed advisory. (See also
http://www.bioinformatics.org/phplabware/labwiki/index.php?page=release_notes)
Since the developer is currently patching the current release it is
possible that you can find in the software link different versions of
the same app (1.5.4).
Best,
muuratsalo
------------------------------------------------------------------------
advisory
------------------------------------------------------------------------
------------------------------------------------------------------------
LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
------------------------------------------------------------------------
author............: muuratsalo (Revshell.com)
contact...........: muuratsalo[at]gmail[dot]com
download..........: http://www.bioinformatics.org/phplabware/labwiki/index.php
[0x01] Vulnerability overview:
All versions of LabStore <= 1.5.4 are affected by Sql injection vulnerabilities.
A valid account could be required to exploit the vulnerabilities.
[0x02] Disclosure timeline:
[04/11/2011] - Multiple sql injection vulnerabilities discovered and
reported to the vendor
[05/11/2011] - Multiple sql injection vulnerabilities fixed, LabStoRe
1.5.4 released.
[05/11/2011] - LabStoRe 1.5.4 is still vulnerable to some sql
injection vulnerabilities.
[05/11/2011] - The vendor is currently working on fixing the reported issues.
[06/11/2011] - Public disclosure
[0x03] Proof of Concept:
http://localhost/labstore/stocks/interface_creator/index.php?table_name=proteins&function=search&where_clause=[SQL
INJECTION]&page=0&order=nature&order_type=ASC
http://localhost/labstore/stocks/interface_creator/index_long.php?table_name=proteins&function=search&where_clause=[SQL
INJECTION]&page=0&order=nature&order_type=ASC
http://localhost/labstore/stocks/interface_creator/index_short.php?table_name=proteins&function=search&where_clause=[SQL
INJECTION]&page=0&order=nature&order_type=ASC