Blursoft blur6ex 0.3.462 ID sql injection

Summaryinfo

A vulnerability was found in Blursoft blur6ex 0.3.462. It has been classified as critical. The affected element is an unknown function. Performing a manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2006-3065. The attack can be initiated remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in Blursoft blur6ex 0.3.462. This affects an unknown code block. The manipulation of the argument ID with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different.

The weakness was released 06/19/2006 (Website). The advisory is shared at vupen.com. This vulnerability is uniquely identified as CVE-2006-3065 since 06/19/2006. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1505 for this issue.

A public exploit has been developed by rgod and been published even before and not after the advisory. The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 7 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (27120), Exploit-DB (1904) and Secunia (SA20646†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Blursoft

Name

• blur6ex

Version

• 0.3.462

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion