PostNuke PNPHPBB2 Module Viewforum.PHP SQL Injection Vulnerability

Bugtraq ID:	24760
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 03 2007 12:00AM
Updated:	Jul 05 2007 04:27PM
Credit:	Coloss is credited with the discovery of this vulnerability.
Vulnerable:	PNphpBB PNphpBB2 1.2.0 i PNphpBB PNphpBB 1.2 g PNphpBB PNphpBB 1.2 f PNphpBB PNphpBB 1.2
Not Vulnerable:

PostNuke PNPHPBB2 Module Viewforum.PHP SQL Injection Vulnerability

The PostNuke PNphpBB2 module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

This issue affects PNphpBB2 1.2i and prior versions; other versions are also affected.

PostNuke PNPHPBB2 Module Viewforum.PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/PNphpBB2_SQL_Inj_Viewforum_rexp.php

PostNuke PNPHPBB2 Module Viewforum.PHP SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

PostNuke PNPHPBB2 Module Viewforum.PHP SQL Injection Vulnerability

References:

• PNphpBB Homepage (PNphpBB)