WebspotBlogging Login.PHP SQL Injection Vulnerability

Bugtraq ID:	16319
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability.
Vulnerable:	Webspot WebspotBlogging 3.0
Not Vulnerable:	Webspot WebspotBlogging 3.0.1

WebspotBlogging Login.PHP SQL Injection Vulnerability


WebspotBlogging is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

WebspotBlogging Login.PHP SQL Injection Vulnerability

An exploit is not required.

The following proof of concept example is available:
http://www.example.com/webspot/login.php
Username: aaaa' union select 1,2,3,1,1,6, 7/*
Password: any

WebspotBlogging Login.PHP SQL Injection Vulnerability

Solution:

The vendor has released an update addressing this issue:


Webspot WebspotBlogging 3.0

• Webspot webspotblogging_3-01.zip
  http://prdownloads.sourceforge.net/webspotblogging/webspotblogging_3-0 1.zip

WebspotBlogging Login.PHP SQL Injection Vulnerability

References:

• [eVuln] WebspotBlogging Authentication Bypass Vulnerability ([email protected])
  
• WebSpot WebspotBlogging Home Page (WebSpot)
  
• WebspotBlogging Release 3.01 (Webspot)
  
• [eVuln] WebspotBlogging Authentication Bypass Vulnerability ([email protected])