CVE-2012-0973: SQL Injection

Q: Which deployments are affected?

OSClass versions before 2.3.5 are affected. The vulnerable request path is index.php with the sCategory parameter.

Q: Does exploitation require authentication or special access?

No authentication is required. The supplied vector is network-accessible and has low attack complexity, so a remote attacker can send a crafted request to the affected parameter.

Q: What is the impact of successful exploitation?

An attacker can execute arbitrary SQL commands. The reported impact includes compromise of confidentiality, integrity, and availability.

Q: What should be done to remediate the issue?

Upgrade OSClass to version 2.3.5 or later. The issue is reported in code handling category searches, specifically osc_search_category_id and findBySlug.

Published Sep 25, 2012

Updated

Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the (1) oscsearchcategoryid function in oc-includes/osclass/helpers/hSearch.php and (2) findBySlug function oc-includes/osclass/model/Category.php. NOTE: some of these details are obtained from third party information.

Affected Software

1 affected component

OSClass Osclass<=2.3.4

Event History

Sep 25, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

Which deployments are affected?

OSClass versions before 2.3.5 are affected. The vulnerable request path is index.php with the sCategory parameter.

Does exploitation require authentication or special access?

No authentication is required. The supplied vector is network-accessible and has low attack complexity, so a remote attacker can send a crafted request to the affected parameter.

What is the impact of successful exploitation?

An attacker can execute arbitrary SQL commands. The reported impact includes compromise of confidentiality, integrity, and availability.

What should be done to remediate the issue?

Upgrade OSClass to version 2.3.5 or later. The issue is reported in code handling category searches, specifically osc_search_category_id and findBySlug.

CVE-2012-0973: SQL Injection

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or special access?

What is the impact of successful exploitation?

What should be done to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or special access?

What is the impact of successful exploitation?

What should be done to remediate the issue?