PortailPHP ID Parameter SQL Injection Vulnerability
BID:13708
Info
PortailPHP ID Parameter SQL Injection Vulnerability
| Bugtraq ID: | 13708 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2005 12:00AM |
| Updated: | May 23 2005 12:00AM |
| Credit: | CENSORED <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
PortailPHP PortailPHP 1.3 |
| Not Vulnerable: | |
Discussion
PortailPHP ID Parameter SQL Injection Vulnerability
PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
PortailPHP ID Parameter SQL Injection Vulnerability
No exploit is required.
Proof of concept example URIs have been provided:
http://www.example.com/index.php?affiche=News&id='[SQL inj]
http://www.example.com/index.php?affiche=File&id='[SQL inj]
http://www.example.com/index.php?affiche=Liens&id='[SQL inj]
http://www.example.com/index.php?affiche=Faq&id='[SQL inj]
Alberto Trivero <[email protected]> has supplied the following exploit:
No exploit is required.
Proof of concept example URIs have been provided:
http://www.example.com/index.php?affiche=News&id='[SQL inj]
http://www.example.com/index.php?affiche=File&id='[SQL inj]
http://www.example.com/index.php?affiche=Liens&id='[SQL inj]
http://www.example.com/index.php?affiche=Faq&id='[SQL inj]
Alberto Trivero <[email protected]> has supplied the following exploit:
Solution / Fix
PortailPHP ID Parameter SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PortailPHP ID Parameter SQL Injection Vulnerability
References:
References:
- PortailPHP Home Page (PortailPHP)
- SQL Injection Exploit for Portail PHP < 1.3 ("Alberto Trivero"
- SQL injections in PortailPHP (CENSORED