FusionBB Multiple Input Validation Vulnerabilities
BID:13939
Info
FusionBB Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 13939 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 13 2005 12:00AM |
| Updated: | Jun 13 2005 12:00AM |
| Credit: | Discovery is credited to James Bercegay of the GulfTech Security Research Team. |
| Vulnerable: |
InteractivePHP FusionBB 0.11 Beta InteractivePHP FusionBB 0.10 Beta InteractivePHP FusionBB 0.9 Beta InteractivePHP FusionBB 0.8 Beta InteractivePHP FusionBB 0.7 Beta InteractivePHP FusionBB 0.6 Beta InteractivePHP FusionBB 0.5 Beta InteractivePHP FusionBB 0.4 Beta InteractivePHP FusionBB 0.3 Beta InteractivePHP FusionBB 0.2 Beta InteractivePHP FusionBB 0.1 Beta |
| Not Vulnerable: |
InteractivePHP FusionBB 0.12 Beta |
Discussion
FusionBB Multiple Input Validation Vulnerabilities
FusionBB is affected by multiple vulnerabilities. These issues arise due to a failure of the application to properly sanitize user-supplied input.
The following specific vulnerabilities were identified:
The application is affected by a local file include vulnerability. The attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
FusionBB is prone to multiple SQL injection vulnerabilities as well. These vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
FusionBB is affected by multiple vulnerabilities. These issues arise due to a failure of the application to properly sanitize user-supplied input.
The following specific vulnerabilities were identified:
The application is affected by a local file include vulnerability. The attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
FusionBB is prone to multiple SQL injection vulnerabilities as well. These vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
FusionBB Multiple Input Validation Vulnerabilities
An exploit is not required.
The following proof of concept is available:
Cookie: bb_session_id=' or user_id = '1; bb_uid=1;
An exploit is not required.
The following proof of concept is available:
Cookie: bb_session_id=' or user_id = '1; bb_uid=1;
Solution / Fix
FusionBB Multiple Input Validation Vulnerabilities
Solution:
The vendor has released FusionBB .12 Beta to address these issues. Please contact the vendor for more information about obtaining fixes.
Solution:
The vendor has released FusionBB .12 Beta to address these issues. Please contact the vendor for more information about obtaining fixes.
References
FusionBB Multiple Input Validation Vulnerabilities
References:
References:
- FusionBB Change Log (InteractivePHP)
- FusionBB Product Page (InteractivePHP)
- FusionBB Multiple Vulnerabilities (GulfTech Security Research