Description
Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, (3) team, (4) level, (5) status, (6) teamname, and (7) teamlead parameters in (a) auth.php; the (8) username, (9) action, and (10) filter parameters in (b) authuser.php; the (11) username parameter in (c) utils.php; the (12) id and (13) date parameters in (d) traffic.php; the (14) username parameter in (e) userstatistics.php; and the (15) USERNAME and (16) PASSWORD parameters in a cookie to (f) chgpwd.php.
References
- 20060316 Milkeyway Multiple Vulnerabilities mailing-list
- 1015778 vdb-entry
- 23928 vdb-entry
- 17127 vdb-entry
- http://www.ush.it/team/ascii/hack-milkeway/advisory.txt
- milkeyway-multiple-sql-injection(25281) vdb-entry
- 23929 vdb-entry
- 23925 vdb-entry
- ADV-2006-0968 vdb-entry
- 23931 vdb-entry
- http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt
- 23927 vdb-entry
- 19258 third-party-advisory
- milkeyway-admin-sql-injection(25287) vdb-entry