vendor:
AWBS
by:
Bikramaditya Guha
8,8
CVSS
HIGH
SQL Injection and Cross-Site Scripting (Stored)
89, 79
CWE
Product Name: AWBS
Affected Version From: 2.9.6
Affected Version To: 2.9.6
Patch Exists: NO
Related CWE: N/A
CPE: a:total_online_solutions:awbs:2.9.6
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Apache, PHP/5.3.28, MySQL/5.5.50-cll
2016
AWBS v2.9.6 Multiple Remote Vulnerabilities
AWBS suffers from multiple SQL Injection vulnerabilities. Input passed via the 'cat' and 'so' GET parameters are not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Multiple cross-site scripting vulnerabilities were also discovered. The issue is triggered when input passed via multiple parameters is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Mitigation:
Input validation should be performed to ensure that untrusted data is not used to generate SQL queries. All input data should be validated and filtered, and special characters should be escaped before being used in SQL queries.
