CVE-2004-1401

Vulnerability

CVE-2004-1401 is an SQL injection vulnerability in the verify.asp file within the blogadmin folder of ASP-rider, a Farsi weblog application written in ASP. The vulnerability exists because the username parameter is not sanitized before being used in an SQL query, allowing an attacker to inject arbitrary SQL statements. ASP-rider versions up to and including the affected release are vulnerable, as noted in the advisory [1].

Exploitation

An attacker can exploit this vulnerability remotely without authentication by crafting a malicious HTTP request to the verify.asp page. The advisory [1] provides a proof of concept: by sending a request such as /blogadmin/verify.asp?username='union select 1,1,1,1,1,1,1,1 from tbl_users where ''='&password=1, the attacker can bypass the login mechanism and gain administrative access. This is a classic blind SQL injection using a UNION-based technique.

Impact

Successful exploitation allows an unauthenticated attacker to bypass authentication entirely and gain administrative access to the ASP-rider weblog. This can lead to full compromise of the application, including unauthorized modification of content, disclosure of sensitive data, and further exploitation of the server [1].

Mitigation

The vulnerability was patched by the vendor at the time of disclosure, as stated in the advisory from 2004 [1]. Users should ensure they are running a version of ASP-rider that includes the fix, or apply input sanitization to the username parameter in verify.asp. No further official updates are expected, as the software is likely end-of-life. This CVE is not listed on the CISA Known Exploited Vulnerabilities catalog.