PunBB Multiple Input Validation Vulnerabilities

Bugtraq ID:	23427
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2007 12:00AM
Updated:	Apr 12 2007 04:01PM
Credit:	DarkFig is credited with the discovery of these vulnerabilities.
Vulnerable:	PunBB PunBB 1.2.14
Not Vulnerable:	PunBB PunBB 1.2.15

PunBB Multiple Input Validation Vulnerabilities

PunBB is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

PunBB 1.2.14 is vulnerable; earlier versions may also be affected.

PunBB Multiple Input Validation Vulnerabilities

An attacker can exploit an SQL-injection vulnerability or arbitrary-code-execution vulnerability via a browser. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting victim to follow a malicious URI.

Sample exploit code has been provided:

• /data/vulnerabilities/exploits/23427.php

PunBB Multiple Input Validation Vulnerabilities

Solution:
The vendor has released version 1.2.15 to address these issues; please see the references for details.


PunBB PunBB 1.2.14

• PunBB punbb-1.2.15.tar.gz
  http://www.punbb.org/download/punbb-1.2.15.tar.gz

PunBB Multiple Input Validation Vulnerabilities

References:

• PunBB Homepage (PunBB)
  
• PunBB <= 1.2.14 Remote Code Execution (Exploit) ([email protected])