Hinton Design PHPHT Multiple Input Validation Vulnerabilities
BID:16562
Info
Hinton Design PHPHT Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16562 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2006 12:00AM |
| Updated: | Feb 09 2006 05:58PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of these issues. |
| Vulnerable: |
Hinton Design phpht 1.3 |
| Not Vulnerable: | |
Discussion
Hinton Design PHPHT Multiple Input Validation Vulnerabilities
The 'phpht' application is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or possibly control how the site is rendered to the user.
Attackers may be also able to exploit vulnerabilities in the underlying database implementation and conduct other attacks.
Some of these issues may be related to those discussed in BID 16541 (Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities) and BID 16528 (Hinton Design PHPStatus Username SQL Injection Vulnerability).
The 'phpht' application is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or possibly control how the site is rendered to the user.
Attackers may be also able to exploit vulnerabilities in the underlying database implementation and conduct other attacks.
Some of these issues may be related to those discussed in BID 16541 (Hinton Design PHPHG Guestbook Multiple Input Validation Vulnerabilities) and BID 16528 (Hinton Design PHPStatus Username SQL Injection Vulnerability).
Exploit / POC
Hinton Design PHPHT Multiple Input Validation Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
Hinton Design PHPHT Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Hinton Design PHPHT Multiple Input Validation Vulnerabilities
References:
References:
- phpht Homepage (Hinton Design)
- phpht Topsites Multiple Vulnerabilities (eVuln)