PT-2009-4275 · Mycolex · Mycolex

Yenh4Cker · Published 2009-05-29 · Updated 2017-09-29 · CVE-2009-1810

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: myColex version 1.4.2

Description: The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This can be achieved via the formUser parameter (also known as the Name field) in the /common/login.php endpoint. Additionally, remote authenticated users can exploit the vulnerability through the ID parameter in a Detail action to various PHP files, including kategorie.php, medium.php, person.php, or schlagwort.php in the modules/ directory. The vulnerability is related to the classes/class.perform.php file.

Recommendations: For myColex version 1.4.2, consider restricting access to the /common/login.php endpoint and the modules/ directory to minimize the risk of exploitation. As a temporary workaround, avoid using the formUser parameter and the ID parameter in the affected PHP files until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2009-1810

Affected Products

Mycolex

References · 6

• 🔥 https://exploit-db.com/exploits/8707 · Exploit
• 🔥 http://securityfocus.com/bid/34997 · Exploit
• http://secunia.com/advisories/35111 · Vendor Advisory
• http://collector.ch/drupal5/?q=node/39 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1810 · Security Note
• http://vupen.com/english/advisories/2009/1344 · Note