FreeBSD : phpList -- SQL injection and XSS vulnerability (fd8bac56-c444-11e1-864b-001cc0877741)

NASLDB: FreeBSD : phpList -- SQL injection and XSS vulnerability (fd8bac56-c444-11e1-864b-001cc0877741)

General

ID: 59828
Name: FreeBSD : phpList — SQL injection and XSS vulnerability (fd8bac56-c444-11e1-864b-001cc0877741)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

Zero Science Lab reports :

Input passed via the parameter ‘sortby’ is not properly sanitised
before being returned to the user or used in SQL queries. This can be
exploited to manipulate SQL queries by injecting arbitrary SQL code.
The param ‘num’ is vulnerable to a XSS issue where the attacker can
execute arbitrary HTML and script code in a user’s browser session in
context of an affected site.

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2012-2740
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2012/03/21
Patch Release: 2012/07/02
Plugin Release: 2012/07/03

Plugin

Version: 1.2
Filename: freebsd_pkg_fd8bac56c44411e1864b001cc0877741.nasl
Filesize: 4803 bytes
MD5 Hash: c18459140ee461919106265d89f8b984

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"