Emilda Management.PHP Input Validation Vulnerability

Bugtraq ID:	14244
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 13 2005 12:00AM
Updated:	Jul 13 2005 12:00AM
Credit:	The vendor has been credited with the discovery of this vulnerability.
Vulnerable:	Realnode Emilda 1.2.2 Realnode Emilda 1.2.1 Realnode Emilda 1.2 beta Realnode Emilda 1.2 alpha Realnode Emilda 1.2 Realnode Emilda 1.1
Not Vulnerable:	Realnode Emilda 1.2.3

Emilda Management.PHP Input Validation Vulnerability

Emilda is affected by an input validation vulnerability.

An attacker can supply an arbitrary value to the 'user_id' parameter and modify the user's information. This would result in a loss of integrity and possible confidentiality.

The vendor has addressed this version in Emilda version 1.2.3.

Emilda Management.PHP Input Validation Vulnerability

No exploit required.

Emilda Management.PHP Input Validation Vulnerability

Solution:
The vendor has addressed this issue in Emilda version 1.2.3:


Realnode Emilda 1.1

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Realnode Emilda 1.2 beta

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Realnode Emilda 1.2 alpha

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Realnode Emilda 1.2

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Realnode Emilda 1.2.1

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Realnode Emilda 1.2.2

• Realnode emilda-1.2.3.tar.gz
  http://ftp.realnode.com/pub/emilda/releases/emilda-1.2.3.tar.gz

Emilda Management.PHP Input Validation Vulnerability

References:

• Emilda Website (Realnode)