JiveJdon 5.0 SQL Injection Vulnerability in userListAction username Parameter

Vulnerability Overview JiveJdon 5.0 is affected by a SQL injection vulnerability located in the parameter of . Affected Versions JiveJdon 5.0 Remediation Upgrade to a secure version or apply the official patch. POC Code ```java package com.jivesoftware.forum.action; import com.jivesoftware.forum.JiveGlobals; import com.jivesoftware.forum.User; import com.jivesoftware.forum.UserManager; import com.jivesoftware.forum.auth.AuthService; import com.jivesoftware.forum.auth.AuthServiceFactory; import com.jivesoftware.forum.auth.AuthToken; import com.jivesoftware.forum.auth.AuthTokenFactory; import com.jivesoftware.forum.auth.AuthTokenImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImpl; import com.jivesoftware.forum.auth.AuthTokenImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactoryImplFactory; import com.jivesoftware.forum.auth.AuthTokenImplFactoryIm

Goal Reached Thanks to every supporter — we hit 100%!

JiveJdon 5.0 SQL Injection Vulnerability in userListAction username Parameter

More from this source