J-Security Center

Latest Attack Object Updates
  • IDP Daily Update #1545
    posted: 11/19/09
  • NSM Daily Update #1545
    posted: 11/19/09
  • Deep Inspection 5.3r5 and above, 5.4, 6.0 #1545
    posted: 11/19/09
  • Deep Inspection 5.1 and 5.2 #1435
    posted: 11/19/09
  • Deep Inspection 5.0, 5.3r4 and below #1132
    posted: 03/28/08 (04/01/08 for 5.0)
  • Antivirus
    posted: 11/19/09

Title: MySQL Eventum Multiple Input Validation Vulnerabilities

Severity: MODERATE

Description:

MySQL Eventum is designed to be a software bug-tracking application. It is Web-based, implemented in PHP with a MySQL database back end. It is freely available for Unix, Apple Mac OS X, other Unix variants, and Microsoft Windows.

Multiple input validation vulnerabilities reportedly affect MySQL Eventum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic Web page content.

Reportedly multiple cross site scripting issues affect the 'email' field of the 'index.php' and 'forgot_password.php' scripts and the 'title' and 'outgoing_sender_name' parameters of the 'projects.php' script.

Also HTML injection vulnerabilities have been reported to affect the 'full_name', 'sms_email', 'list_refresh_rate', 'emails_refresh_rate' parameters of the 'preferences.php' script.

Finally a default administrator account vulnerability apparently presents itself in the affected software. The default username for this account is 'system-account@www.example.com'. No information is available regarding the authentication credentials for this backdoor account. This BID will be updated as more information is released.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based authentication credentials as well as other attacks.

Affected Products:

  • MySQL AB Eventum 1.1.0
  • MySQL AB Eventum 1.2.0
  • MySQL AB Eventum 1.2.1
  • MySQL AB Eventum 1.2.2
  • MySQL AB Eventum 1.3.0
  • MySQL AB Eventum 1.3.1

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.