bugtraq - ASPjar Guestbook login.asp not official patch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <00a001c51377$e15e3250$0100a8c0@server>
Date: Tue, 15 Feb 2005 17:03:23 +0100
From: "CorryL" <corryl@...overde.com>
To: <full-disclosure@...ts.netsys.com>
Cc: bugtraq@...urityfocus.com
Subject: ASPjar Guestbook login.asp not official patch

..::x0n3-h4ck.org Italian Security Team::..

ASPjar Guestbook login.asp not official patch

Application: Aspjar Guestbook
Version: 1.0
Bug: Sqj injection
Vendor : not attainable

DETAILS

Supply in the password field ' or ''=', this should allow you to bypass
the authentication process used by ASPjar Guestbook.

Patch:

This is patch created by Expanders from x0n3-h4ck Italian Security Team.

Find in the file admin\login.asp this is string:

strSql ="SELECT * from admin where Name = '" & Request.Form("User") & "' and
password = '" & Request.Form("Password") &"'"

you replace with:

strSql ="SELECT * from admin where Name = '" &
replace(Request.Form("User"),"'","") & "' and password = '" &
replace(Request.Form ("Password"),"'","") &"'"

For Info www.x0n3-h4ck.org

CorryL

corryl80@...il.com

www.x0n3-h4ck.org

_________________________________
www.seekstat.it is your web stat
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html