Xoops Edituser.PHP SQL Injection Vulnerability

Bugtraq ID:	19720
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2006 12:00AM
Updated:	Sep 05 2006 06:13PM
Credit:	[email protected] has been credited with the discovery of this vulnerability.
Vulnerable:	Xoops Xoops 2.0.14
Not Vulnerable:	Xoops Xoops 2.0.15

Xoops Edituser.PHP SQL Injection Vulnerability

Xoops is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

An attacker may be able to exploit this issue to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.

Xoops version 2.0.14 is reported vulnerable; other versions may also be affected.

Xoops Edituser.PHP SQL Injection Vulnerability

Attackers can exploit this issue via a web client.

Xoops Edituser.PHP SQL Injection Vulnerability

Solution:
The vendor has released version 2.0.15 to address this issue; please see the reference section for more information.


Xoops Xoops 2.0.14

• Xoops xoops-2.0.15.tar.gz
  http://prdownloads.sourceforge.net/xoops/xoops-2.0.15.tar.gz

Xoops Edituser.PHP SQL Injection Vulnerability

References:

• proManager <= 0.73 (Add Admin) SQL Injection Vulnerabilities (Kacper)
  
• ProManager Homepage (Promanager)