Softbiz Dating Script Multiple SQL Injection Vulnerabilities

Bugtraq ID:	18605
Class:	Input Validation Error
CVE:	CVE-2006-3271
Remote:	Yes
Local:	No
Published:	Jun 22 2006 12:00AM
Updated:	Apr 29 2010 05:23PM
Credit:	Ellipsis Security is credited with the discovery of these vulnerabilities.
Vulnerable:	SoftBiz Dating Script 1.0
Not Vulnerable:

Softbiz Dating Script Multiple SQL Injection Vulnerabilities

Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Softbiz Dating Script Multiple SQL Injection Vulnerabilities

These issues can be exploited through a web client.

The following example URIs are available:

http://www.example.com/search_results.php?browse=-1+union+select+1,version(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,version(),6,7,8,9--

• /data/vulnerabilities/exploits/Softbiz-DatingScript-0622-sql.txt

Softbiz Dating Script Multiple SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Softbiz Dating Script Multiple SQL Injection Vulnerabilities

References:

• Softbiz Dating Script / Personal Classifieds (Softbiz)
  
• Softbiz Dating 1.0 SQL injection (Ellipsis Security)