Interchange Multiple Vulnerabilities

Bugtraq ID:	14931
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 24 2005 12:00AM
Updated:	Sep 24 2005 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Interchange Interchange 5.2 Interchange Interchange 5.0.1
Not Vulnerable:	Interchange Interchange 5.2.1 Interchange Interchange 5.0.2

Interchange Multiple Vulnerabilities

Interchange is reported prone to multiple vulnerabilities.

The following specific issues were identified:

Interchange 5.2.0 is affected by an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Interchange 5.0.1 is prone to an Interchange Tag Language (ITL) injection vulnerability. This issue may facilitate session hijacking or manipulation of site content.

Interchange Multiple Vulnerabilities

Exploit code is not required.

Interchange Multiple Vulnerabilities

Solution:
The vendor has released upgrades to address these issues.


Interchange Interchange 5.0.1

• Interchange interchange-5.0.2.tar.gz
  http://ftp.icdevgroup.org/interchange/5.0/tar/interchange-5.0.2.tar.gz

Interchange Interchange 5.2

• Interchange interchange-5.2.1.tar.gz
  http://ftp.icdevgroup.org/interchange/5.2/tar/interchange-5.2.1.tar.gz

Interchange Multiple Vulnerabilities

References:

• Interchange Homepage (Interchange)