Vikingboard Topic.PHP SQL Injection Vulnerability

Bugtraq ID:	19919
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 08 2006 12:00AM
Updated:	Oct 17 2006 03:44PM
Credit:	Hessamx is credited with the discovery of this vulnerability.
Vulnerable:	Vikingboard Viking board 0.1b
Not Vulnerable:	Vikingboard Viking board 0.1.1

Vikingboard Topic.PHP SQL Injection Vulnerability

Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

This may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 0.1b is vulnerable; other versions may also be affected.

Vikingboard Topic.PHP SQL Injection Vulnerability

An attacker can exploit this vulnerability using a web client.

The following proof-of-concept URI is available:

http://www.example.com/topic.php?t=1&s=-1[Query]

Vikingboard Topic.PHP SQL Injection Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.

Vikingboard Topic.PHP SQL Injection Vulnerability

References:

• Vendor Homepage (Vikingboard)
  
• Vikingboard 0.1.1 released! (Vikingboard)
  
• Vikingboard 0.1b Multiple Vulnerabilities (Hessam Salehi)