| QuickerSite Multiple Vulnerabilities |
|
Credit:
| AmnPardaz Security Research Team |
|
Vulnerable:
|
QuickerSite QuickerSite 1.8.5
|
|
Description:
|
QuickerSite is prone to multiple vulnerabilities, including an SQL-injection issue, an authentication-bypass issue, multiple cross-site scripting issues and a file upload vulnerability.
Successful exploit may allow attackers to: - access or modify data - exploit latent vulnerabilities in the underlying database - obtain sensitive information - gain unauthorized access to the affected application - upload arbitrary files and execute arbitrary server-side script code - execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site
This will compromise the application and may help in further attacks.
The issues affects QuickerSite 1.8.5; other versions may also be vulnerable.
|
| Exploit:
|
An attacker can exploit these issues through a browser.
|
|
Solution:
| Currently SecuMania is not aware of any solution for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
References:
|
|