Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
BID:11538
Info
Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 11538 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2004 12:00AM |
| Updated: | Oct 26 2004 12:00AM |
| Credit: | Positive Technologies disclosed these vulnerabilities. |
| Vulnerable: |
Phorum Phorum 5.0.11 |
| Not Vulnerable: | |
Discussion
Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
It is reported that Phorum is prone to a cross-site scripting vulnerability and an SQL injection vulnerability. These issues are due to a failure of the application to properly sanitize user-supplied input.
The cross-site scripting issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.
Successful exploitation of the SQL injection vulnerability could result in the compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
These vulnerabilities were reported to affect version 5.0.11, but other versions may also be affected.
It is reported that Phorum is prone to a cross-site scripting vulnerability and an SQL injection vulnerability. These issues are due to a failure of the application to properly sanitize user-supplied input.
The cross-site scripting issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.
Successful exploitation of the SQL injection vulnerability could result in the compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
These vulnerabilities were reported to affect version 5.0.11, but other versions may also be affected.
Exploit / POC
Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Phorum Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities
References:
References:
- Advisories (MaxPatrol)
- Phorum Homepage (Phorum)