ThWboard Multiple Input Validation Vulnerabilities
BID:15763
Info
ThWboard Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 15763 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2005 12:00AM |
| Updated: | Dec 07 2005 12:00AM |
| Credit: | [email protected] is credited with the discovery of this vulnerability. |
| Vulnerable: |
Thwboard Thwboard Beta 2.8 |
| Not Vulnerable: |
Thwboard Thwboard Beta 2.84 |
Discussion
ThWboard Multiple Input Validation Vulnerabilities
ThWboard is prone to multiple input validation vulnerabilities.
The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input.
A remote attacker may inject SQL, HTML and script code resulting in theft of cookie-based authentication credentials, arbitrary script code execution, and the passing of malicious input to the underlying database application.
Version 3 beta 2.8 is vulnerable; other versions may be affected.
ThWboard is prone to multiple input validation vulnerabilities.
The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input.
A remote attacker may inject SQL, HTML and script code resulting in theft of cookie-based authentication credentials, arbitrary script code execution, and the passing of malicious input to the underlying database application.
Version 3 beta 2.8 is vulnerable; other versions may be affected.
Exploit / POC
ThWboard Multiple Input Validation Vulnerabilities
No exploit is required.
Example URI have been provided:
http://www.example.com/thwb/calendar.php?month=12&year='[SQL]
http://www.example.com/thwb/v_profile.php?user[userid]='[SQL]
http://www.example.com/thwb/misc.php?action=getlastpost&userid='[SQL]
No exploit is required.
Example URI have been provided:
http://www.example.com/thwb/calendar.php?month=12&year='[SQL]
http://www.example.com/thwb/v_profile.php?user[userid]='[SQL]
http://www.example.com/thwb/misc.php?action=getlastpost&userid='[SQL]
Solution / Fix
ThWboard Multiple Input Validation Vulnerabilities
Solution:
The vendor has released version 3 beta 2.84 to address this issue.
Thwboard Thwboard Beta 2.8
Solution:
The vendor has released version 3 beta 2.84 to address this issue.
Thwboard Thwboard Beta 2.8
-
ThWboard thwb-300-beta-2.84-php5.tar.gz
http://prdownloads.sourceforge.net/thwb/thwb-300-beta-2.84-php5.tar.gz
References
ThWboard Multiple Input Validation Vulnerabilities
References:
References:
- Beta 2.84 Release Notes (ThWBoard )
- Product Homepage (Thwboard)
- [KAPDA::#15] - ThWboard multiple vulnerabilities ([email protected])