Manas Tungare Site Membership Script Multiple Input Validation Vulnerabilities

Bugtraq ID:	17045
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 09 2006 12:00AM
Updated:	Mar 11 2006 04:25AM
Credit:	Syst3m_f4ult is credited with the discovery of these vulnerabilities.
Vulnerable:	manas tungare Site Membership Script 0
Not Vulnerable:

Manas Tungare Site Membership Script Multiple Input Validation Vulnerabilities


Site Membership Script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input.

A successful exploit could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Manas Tungare Site Membership Script Multiple Input Validation Vulnerabilities

These issues can be exploited through use of a web client.

Manas Tungare Site Membership Script Multiple Input Validation Vulnerabilities

Solution:
The vendor has addressed this issue in the latest release of the application. Please contact the vendor for information on obtaining and applying the appropriate updates.


manas tungare Site Membership Script 0

• manas tungare site-membership.zip
  http://www.manastungare.com/projects/site-membership/site-membership.z ip

Manas Tungare Site Membership Script Multiple Input Validation Vulnerabilities

References:

• Site Membership Script Homepage (manas tungare)