CVE-2007-4522 Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id...
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php. NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ripe website manager | = 0.8.4 | No fix listed |
| ripe website manager | = 0.8.9 | No fix listed |
References
- 3058 third-party-advisory
- www.freshervisions.com
- 20070822 Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities mailing-list
- 25406 exploit vdb-entry
- ripe-multiple-sql-injection(36180) vdb-entry