X7 Chat Upgradev1.PHP SQL Injection Vulnerability

Bugtraq ID:	19123
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2006 12:00AM
Updated:	Jul 24 2006 10:17PM
Credit:	Discovery is credited to rgod.
Vulnerable:	X7 Group X7 Chat 2.0.4 X7 Group X7 Chat 2.0.2 X7 Group X7 Chat 1.3.6 X7 Group X7 Chat 1.3.5 B X7 Group X7 Chat 1.3.4 B X7 Group X7 Chat 1.3.3 B X7 Group X7 Chat 1.3.2 B X7 Group X7 Chat 2.0
Not Vulnerable:

X7 Chat Upgradev1.PHP SQL Injection Vulnerability

X7 Chat is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Versions 2.0.4 and prior are affected; other versions may also be vulnerable.

X7 Chat Upgradev1.PHP SQL Injection Vulnerability

Attackers can exploit this issue via a web client.

A sample exploit has been provided:

• /data/vulnerabilities/exploits/x7chat-lteq2.0.4-sql-inj.txt

X7 Chat Upgradev1.PHP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

X7 Chat Upgradev1.PHP SQL Injection Vulnerability

References:

• X7 Chat <=2.0.4 old_prefix blind SQL injection / privilege escalation exploit (rgod)
  
• X7 Chat Homepage (X7 Group)