PHPKB 'comment.php' SQL Injection Vulnerability

Bugtraq ID:	28739
Class:	Input Validation Error
CVE:	CVE-2008-1909
Remote:	Yes
Local:	No
Published:	Apr 11 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	parad0x
Vulnerable:	Chadha Software Technologies PHPKB 2.0 Chadha Software Technologies PHPKB 1.5 Chadha Software Technologies PHPKB 0
Not Vulnerable:

PHPKB 'comment.php' SQL Injection Vulnerability

PHPKB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects PHPKB 1.5 and 2.0; other versions may also be affected.

PHPKB 'comment.php' SQL Injection Vulnerability

An attacker can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/comment.php?ID=-67+union+select+concat(user(),char(32),database(),char(32),@@version_compile_os)/*

PHPKB 'comment.php' SQL Injection Vulnerability

Solution:
The vendor has released patches. Please contact the vendor for information on how to obtain and apply the patches.

PHPKB 'comment.php' SQL Injection Vulnerability

References:

• PHPKB Homepage (Chadha Software Technologies)