Description
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) e_mesaj_yas.asp, (b) edi_haber.asp, and (c) haber_devam.asp; (2) hid parameter in (d) yazdir.asp and (e) yorum.asp, and the (3) e parameter in (f) arsiv.asp. NOTE: with administrator credentials, additional vectors exist including (4) yid parameter to (g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (j) admin/haber_sil.asp, (6) kid parameter to (k) admin/kategori_d.asp, (7) tur parameter to (l) admin/haber_ekle.asp, (8) s parameter to (m) admin/e_mesaj_yaz.asp, and id parameter to (n) admin/admin_sil.asp.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Enigma Haber 4.3 - Multiple SQL Injections EDB-1840 · webapps · May 28, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 26109 vdb-entry
- 26119 vdb-entry
- 26115 vdb-entry
- 26107 vdb-entry
- 20060528 Advisory: Enigma Haber <= 4.3 Multiple Remote SQL InjectionVulnerabilities mailing-list
- enigmahaber-multiple-sql-injection(26837) vdb-entry
- 26110 vdb-entry
- 26108 vdb-entry
- 1016171 vdb-entry
- ADV-2006-2032 vdb-entry
- 1003 third-party-advisory
- 26111 vdb-entry
- http://www.nukedx.com/?getxpl=34
- 26112 vdb-entry
- 26116 vdb-entry
- 26117 vdb-entry
- http://www.nukedx.com/?viewdoc=34
- 18148 vdb-entry
- 26106 vdb-entry
- 26114 vdb-entry
- 26113 vdb-entry
- 26118 vdb-entry
- 20357 third-party-advisory