Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
BID:17304
Info
Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
| Bugtraq ID: | 17304 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 29 2006 12:00AM |
| Updated: | Apr 10 2006 03:32PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability. |
| Vulnerable: |
Sourceworkshop Newsletter 1.0 |
| Not Vulnerable: | |
Discussion
Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
Newsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Newsletter version 1.0 is reported to be affected. Other versions may be vulnerable as well.
Newsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Newsletter version 1.0 is reported to be affected. Other versions may be vulnerable as well.
Exploit / POC
Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
This issue can be exploited through a web client.
This issue can be exploited through a web client.
Solution / Fix
Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
References
Sourceworkshop Newsletter Newsletter.PHP SQL Injection Vulnerability
References:
References: