Detections
Analytics
CGI Generic SQL Injection (blind)
high Nessus Plugin ID 42424
Language:
Synopsis
A CGI application hosted on the remote web server is potentially prone to SQL injection attack.Description
By sending specially crafted parameters to one or more CGI scripts hosted on the remote web server, Nessus was able to get a very different response, which suggests that it may have been able to modify the behavior of the application and directly access the underlying database.An attacker may be able to exploit this issue to bypass authentication, read confidential data, modify the remote database, or even take control of the remote operating system.
Solution
Modify the affected CGI scripts so that they properly escape arguments.See Also
http://www.securiteam.com/securityreviews/5DP0N1P76E.html
Plugin Details
Severity: High
ID: 42424
File Name: torture_cgi_blind_sql_injection.nasl
Version: 1.39
Type: remote
Family: CGI abuses
Published: 11/6/2009
Updated: 6/14/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
CVSS Score Rationale: Score based on the common rating of a sqli exposure.
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: manual
CVSS v3
Risk Factor: High
Base Score: 8.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Vulnerability Information
Required KB Items: Settings/enable_web_app_tests