PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

Bugtraq ID:	15399
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2005 12:00AM
Updated:	Nov 12 2005 12:00AM
Credit:	Discovery is credited to [email protected].
Vulnerable:	PhpWebThings PhpWebThings 1.4
Not Vulnerable:

PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

It is likely that the issue could compromise the software. Depending on the database implementation and the nature of the affected query, it may also be possible to gain unauthorized access to the database.

PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

The following example was provided to demonstrate the vulnerability:

http://www.example.com/download.php?file=|SQL

PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability

References:

• phpWebThings Web Site (phpWebThings)
  
• SQL injection in phpWebThing 1.4.4 ([email protected])