bcoos Multiple Input Validation Vulnerabilities
BID:26505
Info
bcoos Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 26505 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6079 CVE-2007-6080 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 20 2007 12:00AM |
| Updated: | Dec 18 2007 08:06PM |
| Credit: | trueend5 <[email protected]> is credited with the discovery of these issues. |
| Vulnerable: |
bcoos bcoos 1.0.10 |
| Not Vulnerable: | |
Discussion
bcoos Multiple Input Validation Vulnerabilities
The 'bcoos' program is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and an SQL-injection issue. These issues occur because the application fails to properly sanitize user-supplied input.
Exploiting these issues may allow an unauthorized user to view files and execute local scripts, execute arbitrary script code, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
This issue affects bcoos 1.0.10; other versions may also be affected.
The 'bcoos' program is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and an SQL-injection issue. These issues occur because the application fails to properly sanitize user-supplied input.
Exploiting these issues may allow an unauthorized user to view files and execute local scripts, execute arbitrary script code, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
This issue affects bcoos 1.0.10; other versions may also be affected.
Exploit / POC
bcoos Multiple Input Validation Vulnerabilities
Attackers can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/bcoos/modules/news/?xoopsOption[pagetype]=../../images/avatar/users/[uid].gif%00
http://www.example.com/bcoos/modules/banners/click.php?bid=-1 UNION SELECT pass FROM bcoos_users LIMIT 1
Attackers can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/bcoos/modules/news/?xoopsOption[pagetype]=../../images/avatar/users/[uid].gif%00
http://www.example.com/bcoos/modules/banners/click.php?bid=-1 UNION SELECT pass FROM bcoos_users LIMIT 1
Solution / Fix
bcoos Multiple Input Validation Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].