PHCDownload SQL Injection and Cross-Site Scripting Vulnerability

vendor:

PHCDownload

by:

Unknown

7.5

CVSS

HIGH

SQL Injection and Cross-Site Scripting

CWE

Product Name: PHCDownload

Affected Version From: 1.1.2000

Affected Version To: Unknown

Patch Exists: NO

Related CWE: Unknown

CPE: a:phcdownload:phcdownload:1.1.0

Metasploit:

Other Scripts:

Platforms Tested: Unknown

Unknown

PHCDownload SQL Injection and Cross-Site Scripting Vulnerability

PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Proper input validation and sanitization of user-supplied input should be implemented to prevent SQL injection and cross-site scripting attacks. Additionally, cookie-based authentication should be implemented securely to mitigate the risk of credential theft.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/27066/info

PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHCDownload 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[phcdownload/search.php?string='