Ideal Science IdealBB Multiple Unspecified Remote Input Validation Vulnerabilities

Bugtraq ID:	11424
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 15 2004 12:00AM
Updated:	Oct 15 2004 12:00AM
Credit:	Discovery is credited to Positive Technologies.
Vulnerable:	Ideal Science IdealBB 1.5.3 Ideal Science IdealBB 1.5.2 c Ideal Science IdealBB 1.5.2 a Ideal Science IdealBB 1.5.2 Ideal Science IdealBB 1.5.1 Ideal Science IdealBB 1.5 RC1 Ideal Science IdealBB 1.5 Beta5 Ideal Science IdealBB 1.5 Beta4 Ideal Science IdealBB 1.5 Beta3 Ideal Science IdealBB 1.5 Beta2 Ideal Science IdealBB 1.5 Beta1 Ideal Science IdealBB 1.4.9 Beta Ideal Science IdealBB 1.4.9 a Ideal Science IdealBB 1.4.9
Not Vulnerable:

Ideal Science IdealBB Multiple Unspecified Remote Input Validation Vulnerabilities

Ideal Science IdealBB is reported prone to multiple unspecified input validation vulnerabilities. These issues result from insufficient sanitization of user-supplied data.

It is reported that the application is affected by SQL injection, cross-site scripting and HTTP response splitting vulnerabilities.

All versions of IdealBB are considered vulnerable at the moment.

Ideal Science IdealBB Multiple Unspecified Remote Input Validation Vulnerabilities

No exploit is required.

Ideal Science IdealBB Multiple Unspecified Remote Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ideal Science IdealBB Multiple Unspecified Remote Input Validation Vulnerabilities

References:

• Advisories (MaxPatrol)
  
• Ideal Bulletin Board Homepage (Ideal Science)