PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
BID:11148
Info
PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
| Bugtraq ID: | 11148 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2004 12:00AM |
| Updated: | Sep 10 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to Criolabs <[email protected]>. |
| Vulnerable: |
PostNuke Modules Factory Subjects Module 2.0 |
| Not Vulnerable: | |
Discussion
PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
Reportedly the PostNuke Modules Factory Subjects module is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameters.
An attacker might exploit this issue to manipulate SQL queries carried out against the database; it may be possible to disclose sensitive information such as the administrator password hash, as well as corrupt arbitrary data. SQL injection issues may also facilitate attacks against latent vulnerabilities in the underlying database.
Reportedly the PostNuke Modules Factory Subjects module is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameters.
An attacker might exploit this issue to manipulate SQL queries carried out against the database; it may be possible to disclose sensitive information such as the administrator password hash, as well as corrupt arbitrary data. SQL injection issues may also facilitate attacks against latent vulnerabilities in the underlying database.
Exploit / POC
PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
No exploit is required to leverage this issue. The following proof of concepts have been provided:
http://www.example.com/index.php?module=subjects&func=listpages&subid=[SQL]
http://www.example.com/index.php?module=subjects&func=viewpage&pageid=[SQL]
http://www.example.com/index.php?module=subjects&func=listcat&catid=[SQL]
No exploit is required to leverage this issue. The following proof of concepts have been provided:
http://www.example.com/index.php?module=subjects&func=listpages&subid=[SQL]
http://www.example.com/index.php?module=subjects&func=viewpage&pageid=[SQL]
http://www.example.com/index.php?module=subjects&func=listcat&catid=[SQL]
Solution / Fix
PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PostNuke Modules Factory Subjects Module SQL Injection Vulnerability
References:
References:
- PostNuke Homepage (PostNuke Development Team)
- PostNuke Modules Factory Home Page (PostNuke Modules Factory)
- SQL-Injection in Subjects 2.0 for Postnuke (Criolabs