SkyPortal Multiple SQL Injection Vulnerabilities

Bugtraq ID:	26504
Class:	Input Validation Error
CVE:	CVE-2007-6078
Remote:	Yes
Local:	No
Published:	Nov 20 2007 12:00AM
Updated:	Jun 11 2008 10:22PM
Credit:	The BugReport Security Research & Penetration Testing Group is credited with the discovery of these vulnerabilities.
Vulnerable:	SkyPortal SkyPortal RC6
Not Vulnerable:	SkyPortal SkyPortal 1.0

SkyPortal Multiple SQL Injection Vulnerabilities

SkyPortal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SkyPortal RC6 is vulnerable; other versions may also be affected.

SkyPortal Multiple SQL Injection Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof of concept is available:

• /data/vulnerabilities/exploits/26504.html

SkyPortal Multiple SQL Injection Vulnerabilities

Solution:
The vendor released an update to address this issue. Please see the references for more information.

SkyPortal Multiple SQL Injection Vulnerabilities

References:

• Vendor Homepage (SkyPortal)
  
• Vulnerability Note VU#315107 (US-CERT)
  
• SkyPortal vRC6 Multiple Remote Vulnerabilities ([email protected])