Mambo LaiThai Multiple SQL Injection And Unspecified Vulnerabilities

Bugtraq ID:	27483
Class:	Input Validation Error
CVE:	CVE-2008-0500 CVE-2008-0499
Remote:	Yes
Local:	No
Published:	Jan 25 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	The vendor disclosed these vulnerabilities.
Vulnerable:	MamboXChange LaiThai 4.5.5
Not Vulnerable:	MamboXChange LaiThai 4.5.6

Mambo LaiThai Multiple SQL Injection And Unspecified Vulnerabilities

Mambo LaiThai is prone to multiple vulnerabilities, including SQL-injection issues and a number of unspecified issues.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Other attacks are also possible.

These issues affect Mambo LaiThai 4.5.5; prior versions may also be vulnerable.

Mambo LaiThai Multiple SQL Injection And Unspecified Vulnerabilities

Attackers can exploit the SQL-injection issues via a browser.

Mambo LaiThai Multiple SQL Injection And Unspecified Vulnerabilities

Solution:
The vendor has released updates to address these issues. Please see the references for more information.


MamboXChange LaiThai 4.5.5

• MamboXChange MamboLaiThaiGlobalV4.5.6.zip
  http://downloads.sourceforge.net/mambolaithai/MamboLaiThaiGlobalV4.5.6 .zip

Mambo LaiThai Multiple SQL Injection And Unspecified Vulnerabilities

References:

• Mambo LaiThai Global 4.5.6 Release Notes (MamboXChange)
  
• Mambo LaiThai Home Page (MamboXChange)