From: Secunia Security Advisories (sec-advsecunia.com)
Date: Mon Mar 22 2004 - 05:12:21 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Member Management System Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA11179

VERIFY ADVISORY:
http://secunia.com/advisories/11179/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting, Manipulation of data

WHERE:
From remote

SOFTWARE:
Member Management System 2.x

DESCRIPTION:
Manuel López has reported some vulnerabilities in Member Management
System, allowing malicious people to conduct script insertion, Cross
Site Scripting and SQL injection attacks.

User input passed to certain parameters in various scripts isn't
properly verified before it is used in SQL queries. This can be
exploited to manipulate SQL queries by injecting arbitrary SQL code.

Examples:
resend.asp?ID=[malicious_SQL]
news_view.asp?ID=[malicious_SQL]

User input to the "err" parameter in "error.asp" isn't properly
verified before it is returned to the user. This can be exploited to
execute arbitrary HTML and script code in a user's browser session in
context of a vulnerable site.

User input passed to the "register.asp" script isn't properly
verified before it is stored. Inserted script code and HTML will
therefore be executed when the administrative user reviews
registrations.

The vulnerabilities have been reported in version 2.1.

SOLUTION:
Edit the source code to ensure that user input is properly verified.

PROVIDED AND/OR DISCOVERED BY:
Manuel López

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]