PT-2005-5052 · Drzes · Drzes Hms

Published 2005-12-20 · Updated 2008-09-20 · CVE-2005-4366

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions DRZES HMS version 3.2

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in multiple parameters and API endpoints, including the plan id parameter to various PHP files such as "domains.php", "viewusage.php", "pop accounts.php", "databases.php", "ftp users.php", "crons.php", "pass dirs.php", "zone files.php", "htaccess.php", and "software.php". Additionally, vulnerabilities exist in the customerPlanID parameter to "viewplan.php" and "listcharges.php", the ref id parameter to "referred plans.php", and the domain parameter to several of the aforementioned PHP files.

Recommendations For DRZES HMS version 3.2, consider disabling the vulnerable parameters such as plan id, customerPlanID, ref id, and domain in their respective PHP files until a patch is available. Restrict access to the affected PHP files to minimize the risk of exploitation. Avoid using the vulnerable parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4366

Affected Products

Drzes Hms

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2005-4366 · Security Note
• http://osvdb.org/21191 · Note
• http://osvdb.org/21183 · Note
• http://securityfocus.com/bid/15644 · Note
• http://osvdb.org/21181 · Note
• http://osvdb.org/21179 · Note
• http://pridels0.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html · Note
• http://osvdb.org/21180 · Note
• http://osvdb.org/21186 · Note
• http://osvdb.org/21185 · Note
• http://osvdb.org/21187 · Note
• http://osvdb.org/21189 · Note
• http://osvdb.org/21192 · Note
• http://osvdb.org/21182 · Note
• http://osvdb.org/21184 · Note