LifeType Index.PHP Date Parameter SQL Injection Vulnerability

Bugtraq ID:	18835
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 05 2006 12:00AM
Updated:	Jul 11 2006 09:48PM
Credit:	Alejandro Ramos is credited with the discovery of this vulnerability.
Vulnerable:	LifeType LifeType 1.0.5
Not Vulnerable:	LifeType LifeType 1.0.6 LifeType LifeType 1.1

LifeType Index.PHP Date Parameter SQL Injection Vulnerability

LifeType is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.0.5 is vulnerable to this issue; other versions may also be affected.

LifeType Index.PHP Date Parameter SQL Injection Vulnerability

This issue can be exploited through a web client.

The following proof of concept is available:

• /data/vulnerabilities/exploits/LifeType105SQLInjJuly052006.pl

LifeType Index.PHP Date Parameter SQL Injection Vulnerability

Solution:
The vendor has reported that a patch version 1.0.6 is available to address this issue. Version 1.1 is also available using the Subversion repository at the vendor's site. Please see the reference section for details.


LifeType LifeType 1.0.5

• LifeType lifetype-1.0.6.tar.gz
  http://prdownloads.sourceforge.net/lifetype/lifetype-1.0.6.tar.gz

LifeType Index.PHP Date Parameter SQL Injection Vulnerability

References:

• LifeType Home Page (LifeType)