National Cyber Awareness System

Vulnerability Summary for CVE-2006-1353

Overview

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-1014

Hyperlink:http://www.vupen.com/english/advisories/2006/1014

External Source: MISC

Name: http://www.nukedx.com/?viewdoc=21

Type: Advisory; Exploit

Hyperlink:http://www.nukedx.com/?viewdoc=21

External Source: MILW0RM

Name: 1597

Hyperlink:http://www.milw0rm.com/exploits/1597

External Source: SECUNIA

Name: 19286

Type: Advisory

Hyperlink:http://secunia.com/advisories/19286

External Source: XF

Name: aspportal-multiple-aspscripts-sql-injection(25346)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25346

External Source: BID

Name: 17174

Hyperlink:http://www.securityfocus.com/bid/17174

External Source: BUGTRAQ

Name: 20060322 Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME TO: fields in the email addresses

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428615/100/0/threaded

External Source: BUGTRAQ

Name: 20060321 ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428355/100/0/threaded

External Source: OSVDB

Name: 24092

Hyperlink:http://www.osvdb.org/24092

External Source: OSVDB

Name: 24091

Hyperlink:http://www.osvdb.org/24091

External Source: OSVDB

Name: 24090

Hyperlink:http://www.osvdb.org/24090

External Source: OSVDB

Name: 24089

Hyperlink:http://www.osvdb.org/24089

External Source: OSVDB

Name: 24088

Hyperlink:http://www.osvdb.org/24088

External Source: OSVDB

Name: 24087

Hyperlink:http://www.osvdb.org/24087

External Source: OSVDB

Name: 24086

Hyperlink:http://www.osvdb.org/24086

External Source: OSVDB

Name: 24085

Hyperlink:http://www.osvdb.org/24085

External Source: OSVDB

Name: 24084

Hyperlink:http://www.osvdb.org/24084

External Source: OSVDB

Name: 24020

Hyperlink:http://www.osvdb.org/24020

External Source: SREASON

Name: 608

Hyperlink:http://securityreason.com/securityalert/608

External Source: FULLDISC

Name: 20060322 Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME TO: fields in the email addresses

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1431.html

External Source: FULLDISC

Name: 20060321 ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html