UTStats Cross Site Scripting / Path Disclosure / SQL Injection

2011-11-08 / 2011-11-09

Credit: LuM Member

Risk: High

Local: No

Remote: Yes

CVE: CVE-2010-5007 | CVE-2010-5009

CWE: CWE-79
CWE-89

# Exploit Title: UTStats XSS, SQL Injection & Full path disclosure
# Date: 13-06-2010
# Author: LuM Member
# Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786
# Version: All recent versions.
# Tested on: Windows 7 x64
# CVE : none
# Code :
There are most likely some more bugs in it. I didn't check the code in
detail.
If you check google, you see there are quite some installs.

XSS:
pages/match_report.php?mid=

Sql Injection:
index.php?p=matchp&pid='

Full Path Disclosure:
pages/servers_info.php


Greetings to LuM.

References:

http://xforce.iss.net/xforce/xfdb/59402

http://www.vupen.com/english/advisories/2010/1465

http://www.securityfocus.com/bid/40836

http://www.exploit-db.com/exploits/13854

http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

UTStats Cross Site Scripting / Path Disclosure / SQL Injection

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.