PT-2009-4277 · Mygesuad · Mygesuad

Yenh4Cker · Published 2009-05-29 · Updated 2017-09-29 · CVE-2009-1812

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: myGesuad version 0.9.14

Description: The issue allows remote attackers to execute arbitrary SQL commands via the formUser parameter in the /common/login.php API endpoint. Additionally, remote authenticated users can execute arbitrary SQL commands via the ID parameter in a Detail action to several API endpoints, including /modules/kategorie.php, /modules/budget.php, /modules/zahlung.php, and /modules/adresse.php. This is related to the classes/class.perform.php file.

Recommendations: For myGesuad version 0.9.14, consider restricting access to the vulnerable API endpoints, such as /common/login.php, /modules/kategorie.php, /modules/budget.php, /modules/zahlung.php, and /modules/adresse.php, until a patch is available. As a temporary workaround, avoid using the formUser and ID parameters in the affected API endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2009-1812

Affected Products

Mygesuad

References · 6

• 🔥 https://exploit-db.com/exploits/8708 · Exploit
• 🔥 http://securityfocus.com/bid/34998 · Exploit
• http://secunia.com/advisories/35110 · Vendor Advisory
• http://collector.ch/drupal5/?q=node/39 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1812 · Security Note
• http://vupen.com/english/advisories/2009/1345 · Note