PT-2006-2362 · Aspportal · Aspportal

Nukedx · Published 2006-03-22 · Updated 2018-10-18 · CVE-2006-1353

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ASPPortal versions 3.1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different ASP files, including the downloadid parameter in "download click.asp", the content ID parameter in "news/News Item.asp". Authenticated administrators can also conduct attacks through various parameters, such as the user id parameter to "users/add edit user.asp", the bannerid parameter to "banner adds/banner add edit.asp", the cat id parameter to "categories/add edit cat.asp", the Content ID parameter to "News/add edit news.asp", the download id parameter to "downloads/add edit download.asp", the Poll ID parameter to "poll/add edit poll.asp", the contactid parameter to "contactus/contactus add edit.asp", and the sortby parameter to "poll/poll list.asp". Additionally, unspecified inputs to "downloads/add edit download.asp" are also vulnerable.

Recommendations For ASPPortal versions 3.1.1 and earlier, consider disabling the SQL execution functionality in the affected ASP files until a patch is available. Restrict access to the vulnerable parameters, such as downloadid, content ID, user id, bannerid, cat id, Content ID, download id, Poll ID, contactid, and sortby, to minimize the risk of exploitation. Avoid using unspecified inputs to "downloads/add edit download.asp" until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1353

Affected Products

Aspportal

References · 22

• 🔥 https://exploit-db.com/exploits/1597 · Exploit
• 🔥 http://nukedx.com/?viewdoc=21 · Exploit
• http://secunia.com/advisories/19286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1353 · Security Note
• http://vupen.com/english/advisories/2006/1014 · Note
• http://securityfocus.com/archive/1/428355/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25346 · Note
• http://osvdb.org/24086 · Note
• http://osvdb.org/24087 · Note
• http://securityfocus.com/archive/1/428615/100/0/threaded · Note
• http://osvdb.org/24092 · Note
• http://osvdb.org/24084 · Note
• http://osvdb.org/24089 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html · Note
• http://osvdb.org/24020 · Note