Gravity Board X Multiple Input Validation Vulnerabilities

Bugtraq ID:	29685
Class:	Input Validation Error
CVE:	CVE-2008-2996
Remote:	Yes
Local:	No
Published:	Jun 12 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	CWH Underground
Vulnerable:	Gravity Board X GBX 2.0 Beta
Not Vulnerable:

Gravity Board X Multiple Input Validation Vulnerabilities

Gravity Board X is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Gravity Board X 2.0 Beta; other versions may also be affected.

Gravity Board X Multiple Input Validation Vulnerabilities

An attacker can exploit these issues via a browser.

The following examples are available:

• /data/vulnerabilities/exploits/29685.html

Gravity Board X Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gravity Board X Multiple Input Validation Vulnerabilities

References:

• GBX Homepage (Gravity Board X)