Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities

Bugtraq ID:	16541
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 08 2006 12:00AM
Updated:	Feb 08 2006 07:58PM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of these issues.
Vulnerable:	Hinton Design phphg Guestbook 1.2
Not Vulnerable:

Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities


The phphg Guestbook program is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or possibly control how the site is rendered to the user.

Attackers may be also able to exploit vulnerabilities in the underlying database implementation and conduct other attacks.

Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities

An exploit is not required.

Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities

References:

• phphg Guestbook Homepage (Hinton Design)
  
• phphg Guestbook Multiple Vulnerabilities (eVuln)
  
• phpstatus Homepage (Hinton Design)