eggBlog Posts.PHP SQL Injection Vulnerability

Bugtraq ID:	18140
Class:	Input Validation Error
CVE:	CVE-2006-2725
Remote:	Yes
Local:	No
Published:	May 29 2006 12:00AM
Updated:	Jan 08 2008 10:39PM
Credit:	Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI is credited with the discovery of this vulnerability.
Vulnerable:	Epic Designs eggblog 3.06
Not Vulnerable:	Epic Designs eggblog 3.07

eggBlog Posts.PHP SQL Injection Vulnerability

eggBlog is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

eggBlog 3.06 is vulnerable to this issue; previous versions may also be affected.

eggBlog Posts.PHP SQL Injection Vulnerability

Attackers can exploit this issue through a browser.

An example URI has been provided:

http://www.example.com/[EggBlog]/rss/posts.php?id=[SQL]

eggBlog Posts.PHP SQL Injection Vulnerability

Solution:
The vendor has released eggBlog 3.0.7 to address this issue.


Epic Designs eggblog 3.06

• Epic Designs eggblog_v3.07.tar.gz
  http://prdownloads.sourceforge.net/eggblog/eggblog_v3.07.tar.gz?downlo ad

eggBlog Posts.PHP SQL Injection Vulnerability

References:

• eggblog Home Page (Epic Designs)
  
• Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities (Mustafa Can Bjorn IPEKCI )
  
• RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities ("Egg" )