vBSupport Integrated Ticket System vBSupport.PHP SQL Injection Vulnerability

Bugtraq ID:	24397
Class:	Input Validation Error
CVE:	CVE-2006-0517
Remote:	Yes
Local:	No
Published:	Jun 09 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	rUnViRuS is credited with the discovery of this vulnerability.
Vulnerable:	VBulletin vBSupport 2.0.0 Beta 1
Not Vulnerable:

vBSupport Integrated Ticket System vBSupport.PHP SQL Injection Vulnerability

vBSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

vBSupport Integrated Ticket System vBSupport.PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/4/vBSupport.php?do=showticket&ticketid=[SQL]

vBSupport Integrated Ticket System vBSupport.PHP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

vBSupport Integrated Ticket System vBSupport.PHP SQL Injection Vulnerability

References:

• vbSupport Homepage (vBulletin)
  
• vBulletin Web Site (vBulletin)
  
• vSupport Integrated Ticket System 3.*.* SQL injection (rUnViRuS)