BID:13966

Mambo Open Source Com_Contents SQL Injection Vulnerability

Info

Mambo Open Source Com_Contents SQL Injection Vulnerability

Bugtraq ID:	13966
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 15 2005 12:00AM
Updated:	Jun 15 2005 12:00AM
Credit:	Disclosure of this issue is credited to pokley <[email protected]>.
Vulnerable:	Mambo Mambo Open Source 4.5.2 .1 Mambo Mambo Open Source 4.5.2 Mambo Mambo Open Source 4.5.1 (1.0.9) Mambo Mambo Open Source 4.5.1 Mambo Mambo Open Source 4.5 (1.0.3beta) Mambo Mambo Open Source 4.5 (1.0.3) Mambo Mambo Open Source 4.5 (1.0.2) Mambo Mambo Open Source 4.5 (1.0.1) Mambo Mambo Open Source 4.5 (1.0.0) Mambo Mambo Open Source 4.0.14

Not Vulnerable:	Mambo Mambo Open Source 4.5.2 .3

Discussion

Mambo Open Source Com_Contents SQL Injection Vulnerability

Mambo 'com_contents' component is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

As a result of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It may be possible for an attacker to disclose the administrator password hash by exploiting this issue.

Exploit / POC

Mambo Open Source Com_Contents SQL Injection Vulnerability

No exploit is required to leverage this issue.

1dt.w0lf has supplied the following exploit:

/data/vulnerabilities/exploits/mambo_user_rating_sql.pl

Solution / Fix

Mambo Open Source Com_Contents SQL Injection Vulnerability

Solution:
The vendor has released an update to address this issue.

Mambo Mambo Open Source 4.0.14