Website Baker Admin Login SQL Injection

high Nessus Plugin ID 20839

Language:

Synopsis

The remote web server contains a PHP script that is vulnerable to SQL attacks.

Description

The remote host is running Website Baker, a PHP-based content management system.

The installed version of Website Baker fails to validate user input to the username parameter of the 'admin/login/index.php' script before using it to generate database queries. An unauthenticated attacker can leverage this issue to bypass authentication, disclose sensitive information, modify data, or launch attacks against the underlying database.

Solution

Enable PHP's 'magic_quotes_gpc' setting or upgrade to Website Baker version 2.6.1 or later.

Plugin Details

Severity: High

ID: 20839

File Name: websitebaker_admin_login_sql_injection.nasl

Version: 1.22

Type: remote

Family: CGI abuses

Published: 2/2/2006

Updated: 4/11/2022

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning, global_settings/supplied_logins_only

Exploit Ease: No exploit is required

Vulnerability Publication Date: 12/8/2005

Reference Information

CVE: CVE-2005-4140

BID: 15776

Detections

Analytics