AkoComment akocomment.PHP Multiple SQL Injection Vulnerabilities

Bugtraq ID:	17241
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 27 2006 12:00AM
Updated:	Mar 27 2006 10:14PM
Credit:	Stefan Keller is credited with the discovery of this vulnerability.
Vulnerable:	Arthur Konze WebDesign AkoComment 2.0
Not Vulnerable:

AkoComment akocomment.PHP Multiple SQL Injection Vulnerabilities

AkoComment is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

AkoComment akocomment.PHP Multiple SQL Injection Vulnerabilities

This issue can be exploited through a web client.

AkoComment akocomment.PHP Multiple SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

AkoComment akocomment.PHP Multiple SQL Injection Vulnerabilities

References:

• Akompany Web Site (Arthur Konze)
  
• AkoComment SQL injection vulnerability ("Stefan Keller" )