p3mbo Content Injector Index.PHP SQL Injection Vulnerability

Bugtraq ID:	26547
Class:	Input Validation Error
CVE:	CVE-2007-6137
Remote:	Yes
Local:	No
Published:	Nov 23 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	S.W.A.T. discovered this vulnerability.
Vulnerable:	p3mbo Content Injector 1.52
Not Vulnerable:	p3mbo Content Injector 1.53

p3mbo Content Injector Index.PHP SQL Injection Vulnerability

p3mbo Content Injector is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects Content Injector 1.52; other versions may also be vulnerable.

p3mbo Content Injector Index.PHP SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

hyyp://www.example.com/index.php?cat=99999/**/union/**/select/**/1,2,username,4,5,password,7,8,9/**/from/**/users/*

p3mbo Content Injector Index.PHP SQL Injection Vulnerability

Solution:
Content Injector 1.53 has been released to address this issue. Please see the references for more information.


p3mbo Content Injector 1.52

• p3mbo cinj153.zip
  http://www.p3mbo.com/cinj153.zip

p3mbo Content Injector Index.PHP SQL Injection Vulnerability

References:

• p3mbo Homepage (p3mbo)