CCHost Index.PHP SQL Injection Vulnerability
BID:19978
CVE-2006-4778 |Info
CCHost Index.PHP SQL Injection Vulnerability
| Bugtraq ID: | 19978 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2006 12:00AM |
| Updated: | Sep 13 2006 04:52PM |
| Credit: | The vendor reported this vulnerability. |
| Vulnerable: |
ccHost ccHost 2.9 |
| Not Vulnerable: |
ccHost ccHost 3.0 |
Discussion
CCHost Index.PHP SQL Injection Vulnerability
ccHost is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
ccHost is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Exploit / POC
CCHost Index.PHP SQL Injection Vulnerability
Attackers can exploit this issue via a web client.
Attackers can exploit this issue via a web client.
Solution / Fix
CCHost Index.PHP SQL Injection Vulnerability
Solution:
The vendor has released version 3.0 to address this issue; please see the references for details.
Solution:
The vendor has released version 3.0 to address this issue; please see the references for details.