Details of VAR-E-200511-0129

ID

VAR-E-200511-0129

CVE

cve_id:

CVE-2005-3819

Trust: 1.6

sources: EXPLOIT-DB: 26586 // EDBNET: 48532

EDB ID

26586

TITLE

vTiger CRM 4.2 - SQL Injection - PHP webapps Exploit

Trust: 0.6

sources: EXPLOIT-DB: 26586

DESCRIPTION

vTiger CRM 4.2 - SQL Injection. CVE-2005-3819CVE-21225 . webapps exploit for PHP platform

Trust: 0.6

sources: EXPLOIT-DB: 26586

AFFECTED PRODUCTS

vendor:

vtiger

model:

crm

scope:

version:

4.2

Trust: 1.9

sources: BID: 15562 // EXPLOIT-DB: 26586 // EDBNET: 48532

EXPLOIT

source: https://www.securityfocus.com/bid/15562/info

vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

vTiger CRM is prone to multiple SQL injection, HTML injection, cross-site scripting and local file include vulnerabilities.

An attacker can exploit these issues to gain administrative access, retrieve username and password pairs, steal cookie-based authentication credentials and retrieve arbitrary local files in the context of the Web server process; other attacks are also possible.

Some of these issues may be related to those discussed in BID 11740 (SugarCRM Multiple Input Validation Vulnerabilities) discovered by James Bercegay and Damon Wood of the GulfTech Security Research Team, as vtiger is a fork of the SugarCRM project.

An independent study by Daniel Fabian of SEC-CONSULT has confirmed the existence of several of these issues. Please see the referenced advisory for more information.

http://www.example.com/?ticket_title=&contact_name=&priority=&status=&action=index&query=true&module=HelpDesk&order_by=&sorder=ASC&viewname=0&button=Search&category=&date_crit=is&date=%27+UNION+SELECT+56%2CCONCAT%28user_name%2C+%22%3A%22%2C+user_password%29%2C+%22Open%22%2C%22Normal%22%2C1%2C1%2C1%2C1%2C1%2C1%2C1%2C1+from+users+where+users.user_name+LIKE+%27

Trust: 1.0

sources: EXPLOIT-DB: 26586

EXPLOIT LANGUAGE

txt

Trust: 0.6

sources: EXPLOIT-DB: 26586

PRICE

free

Trust: 0.6

sources: EXPLOIT-DB: 26586

TYPE

SQL Injection

Trust: 1.6

sources: EXPLOIT-DB: 26586 // EDBNET: 48532

CREDITS

Christopher Kunz

Trust: 0.6

sources: EXPLOIT-DB: 26586

EXTERNAL IDS

db:	BID	id:	15562	Trust: 1.9
db:	NVD	id:	CVE-2005-3819	Trust: 1.6
db:	EXPLOIT-DB	id:	26586	Trust: 1.6
db:	EDBNET	id:	48532	Trust: 0.6

sources: BID: 15562 // EXPLOIT-DB: 26586 // EDBNET: 48532

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2005-3819	Trust: 1.6
url:	https://www.securityfocus.com/bid/15562/info	Trust: 1.0
url:	https://www.exploit-db.com/exploits/26586/	Trust: 0.6
url:	http://www.hardened-php.net/advisory_232005.105.html	Trust: 0.3
url:	http://www.sec-consult.com/231.html	Trust: 0.3
url:	http://www.vtiger.com/	Trust: 0.3

sources: BID: 15562 // EXPLOIT-DB: 26586 // EDBNET: 48532

SOURCES

db:	BID	id:	15562
db:	EXPLOIT-DB	id:	26586
db:	EDBNET	id:	48532

LAST UPDATE DATE

2022-07-27T09:17:34.445000+00:00

SOURCES UPDATE DATE

db:

BID

id:

15562

date:

2005-11-24T00:00:00

SOURCES RELEASE DATE

db:	BID	id:	15562	date:	2005-11-24T00:00:00
db:	EXPLOIT-DB	id:	26586	date:	2005-11-24T00:00:00
db:	EDBNET	id:	48532	date:	2005-11-24T00:00:00