Home page logo
/

bugtraq logo Bugtraq mailing list archives

[eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities
From: alex () evuln com
Date: 19 Apr 2006 07:59:48 -0000

New eVuln Advisory:
N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities
http://evuln.com/vulns/121/summary.html

--------------------Summary----------------
eVuln ID: EV0121
CVE: CVE-2006-1657 CVE-2006-1658
Vendor: Chucky A. Ivey
Software: N.T.
Sowtware's Web Site: http://www.v-gfx.net/
Versions: 1.1.0
Critical Level: Dangerous
Type: Multiple Vulnerabilities
Class: Remote
Status: Unpatched. No reply from developer(s)
PoC/Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

-----------------Description---------------
1. Cross-Site Scripting

Vulnerable Script: index.php

Parameter username is not properly sanitized. This can be used to post arbitrary HTML or web script code. This code 
will be executed when administrator will visit "Login Log" page.

Administrator's session is threatened.


2. PHP Code Insertion

Administrator has an ability to edit variables in ticker.db.php file. Script dont make any sanitation of entered 
values. This can be used to insert arbitrary PHP code.

System access is possible.


--------------PoC/Exploit----------------------
Available at: http://evuln.com/vulns/121/exploit.html

--------------Solution---------------------
No Patch available.

--------------Credit-----------------------
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)


Regards,
Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services
.


  By Date           By Thread  

Current thread:
  • [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities alex (Apr 20)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault