Multiple SQL-injection and HTML-injection vulnerabilities in Easy Banner Free

vendor:

Easy Banner Free

by:

Unknown

7.5

CVSS

HIGH

SQL-injection and HTML-injection

CWE

Product Name: Easy Banner Free

Affected Version From: 2009.05.18

Affected Version To: Unknown

Patch Exists: NO

Related CWE: CVE-Unknown

CPE: a:easy_banner:easy_banner_free:2009.05.18

Metasploit:

Other Scripts:

Platforms Tested:

Unknown

Multiple SQL-injection and HTML-injection vulnerabilities in Easy Banner Free

Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks. The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

To mitigate these vulnerabilities, it is recommended to sanitize user-supplied input to prevent SQL-injection and HTML-injection attacks. Implementing prepared statements or parameterized queries can help protect against SQL-injection. Additionally, implementing proper input validation and output encoding can help prevent HTML-injection.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/45066/info
 
Easy Banner Free is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.
 
The attacker may exploit the SQL-injection issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Easy Banner Free 2009.05.18 is vulnerable; other versions may also be affected. 

&#039;siteurl&#039; : http://"><script>alert(XSS)</script><aa aa="

&#039;urlbanner&#039; : "><script>alert(XSS)</script><aa aa=".gif