EKINBoard Multiple Input Validation Vulnerabilities

Bugtraq ID:	16861
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2006 12:00AM
Updated:	Mar 10 2006 07:35AM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities.
Vulnerable:	Ekinboard Ekinboard 1.0.3
Not Vulnerable:

EKINBoard Multiple Input Validation Vulnerabilities


EKINboard is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

The application is prone to HTML- and SQL-injection vulnerabilities.

EKINBoard Multiple Input Validation Vulnerabilities


These issues could be exploited with a web client.

EKINBoard Multiple Input Validation Vulnerabilities

Solution:
The vendor has released a patch to address this issue.


Ekinboard Ekinboard 1.0.3

• Ekinboard patch_for_1.0.3.txt
  http://www.ekinboard.com/patch_for_1.0.3.txt

EKINBoard Multiple Input Validation Vulnerabilities

References:

• EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities (eVuln)
  
• Ekinboard Homepage (Ekinboard)
  
• [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL (eVuln)