Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
BID:10751
Info
Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 10751 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2004 12:00AM |
| Updated: | Jul 19 2004 12:00AM |
| Credit: | This issue was reported in the product change log. |
| Vulnerable: |
Anton Raharja PlaySMS 0.6 |
| Not Vulnerable: | |
Discussion
Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.
This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue is reported to exist in PlaySMS 0.6. Other versions may be affected as well.
An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.
This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue is reported to exist in PlaySMS 0.6. Other versions may be affected as well.
Exploit / POC
Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
Solution:
PlaySMS 0.7 is available to address this issue.
Anton Raharja PlaySMS 0.6
Solution:
PlaySMS 0.7 is available to address this issue.
Anton Raharja PlaySMS 0.6
-
Anton Raharja playsms-0.7.tar.gz
http://prdownloads.sourceforge.net/playsms/playsms-0.7.tar.gz?download
References
Anton Raharja PlaySMS Unspecified SQL Injection Vulnerability
References:
References:
- PlaySMS (Anton Raharja)
- PlaySMS: Release Notes (Anton Raharja)