Anthill Multiple SQL Injection Vulnerabilities

Bugtraq ID:	18661
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 26 2006 12:00AM
Updated:	Jun 27 2006 03:50PM
Credit:	r0t is credited with the discovery of these vulnerabilities.
Vulnerable:	Anthill Anthill 0.3 Anthill Anthill 0.2.6 Anthill Anthill 0.2.5 Anthill Anthill 0.1.6 .1 - PHP PHP 4.0 0
Not Vulnerable:

Anthill Multiple SQL Injection Vulnerabilities

Anthill is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Anthill Multiple SQL Injection Vulnerabilities

These issues can be exploited through a web client.

Anthill Multiple SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

Anthill Multiple SQL Injection Vulnerabilities

References:

• Anthill SQL injection vuln (r0t)
  
• Anthill Homepage (Anthill)