Easy Travel Portal SQL Vulnerable

vendor:

Easy Travel Portal

by:

L0rd CrusAd3r aka VSN

7,5

CVSS

HIGH

SQLi Vulnerability

CWE

Product Name: Easy Travel Portal

Affected Version From: 2

Affected Version To: 2

Patch Exists: NO

Related CWE: N/A

CPE: a:softwebsnepal:easy_travel_portal

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Easy Travel Portal SQL Vulnerable

This software comes with an admin panel form where you can check the number of listing and do the options like edit/delete. Admin can set email setting form the admin panel. Upload information of your travel country wise. Admin can upload hotel and travel details for each country like hotel photo, rates, hotel location, hotel facilities from admin panel so that visitors to the website can see all these when they log on to website. The vulnerability is a SQLi vulnerability and the demo URL is http://server/traveldemo/tour_packages.asp?country=[sqli], http://server/traveldemo/hoteldetails.asp?id=[sqli], http://server/traveldemo/tourdetails.asp?id=[sqli], http://server/traveldemo/viewnews.asp?id=[sqli].

Mitigation:

Ensure that all user input is properly sanitized and validated before being used in a SQL query.

Source

Exploit-DB raw data:

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Easy Travel Portal SQl Vulnerable
Vendor url:http://www.softwebsnepal.com/
Version:2
Price:n/a
Published: 2010-06-17
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description

Admin Panel:
This software comes with admin panel form where you can check the number of
listing and do the options like edit / delete . Admin can set email setting
form the admin panel.


Country list:
Upload information of your travel country wise. You can upload country
information like weather, culture, best to wear e.t.c so that to provide
more information about each country for your Visitors.


Hotel details / Travel information:
Admin can upload hotel and travel details for each country like hotel photo,
rates, hotel location , hotel facilites from admin panel so that visitors to
the website can see all these when they log on to website. Since admin can
upload photo, and update information about hotel's and travel plan, its easy
to give new and updated information to customers.


~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO  :

http://server/traveldemo/tour_packages.asp?country=[sqli]

http://server/traveldemo/hoteldetails.asp?id=[sqli]

http://server/traveldemo/tourdetails.asp?id=[sqli]

http://server/traveldemo/viewnews.asp?id=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r