Detections
Analytics

WebTitan 'categories-x.php' 'sortkey' Parameter SQL Injection

high Nessus Plugin ID 76598

Language:

Synopsis

The remote host has a web application installed that is affected by a SQL injection vulnerability.

Description

The version of WebTitan installed on the remote host is affected by a SQL injection vulnerability in the 'sortkey' parameter of the 'categories-x.php' script. By sending a specially crafted request, a remote unauthenticated attacker could execute arbitrary SQL queries.

Solution

Upgrade to WebTitan 4.04 or later.

See Also

https://seclists.org/fulldisclosure/2014/Jun/35

Plugin Details

Severity: High

ID: 76598

File Name: webtitan_sortkey_sqli.nasl

Version: 1.6

Type: remote

Family: CGI abuses

Published: 7/18/2014

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:webtitan:webtitan

Required KB Items: www/webtitan

Exploit Available: true

Exploit Ease: No exploit is required

Exploited by Nessus: true

Patch Publication Date: 6/3/2014

Vulnerability Publication Date: 6/6/2014

Reference Information

CVE: CVE-2014-4307

BID: 67921