SaPHPLesson Show.PHP SQL Injection Vulnerability

Bugtraq ID:	18117
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 27 2006 12:00AM
Updated:	Jul 05 2007 05:07PM
Credit:	sweet-devil is credited with the discovery of this vulnerability.
Vulnerable:	Arabless.com SaphpLesson 2.0
Not Vulnerable:

SaPHPLesson Show.PHP SQL Injection Vulnerability

SaPHPLesson is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

SaPHPLesson Show.PHP SQL Injection Vulnerability

Attackers may exploit this issue through a browser.

An example URI has been provided:

http://www.example.com/lesons/show.php?lessid=1%20union%20select%20null,null,null,ModName,ModPassword,ModPassword,ModPassword%20FROM%20modretor

SaPHPLesson Show.PHP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected]

SaPHPLesson Show.PHP SQL Injection Vulnerability

References:

• Critical sql injection in saphplesson 2.0 ([email protected])
  
• SQL Injection in SaphpLesson2.0 'show.php' ( Sw33t.h4cK3r)