Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
BID:31130
Info
Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
| Bugtraq ID: | 31130 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2008 12:00AM |
| Updated: | Sep 15 2008 10:40PM |
| Credit: | SirGod |
| Vulnerable: |
Blue Dojo Graffiti Forums 1.0 |
| Not Vulnerable: | |
Discussion
Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
Graffiti Forums is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and an HTML-injection issue.
Attackers can exploit these issues to steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, access or modify data, or exploit latent vulnerabilities in the underlying database.
Graffiti Forums 1.0 is vulnerable; other versions may also be affected.
Graffiti Forums is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and an HTML-injection issue.
Attackers can exploit these issues to steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, access or modify data, or exploit latent vulnerabilities in the underlying database.
Graffiti Forums 1.0 is vulnerable; other versions may also be affected.
Exploit / POC
Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/messages.php?t=-1 union all select version()--
http://www.example.com/messages.php?t=-1 union ll select database()--
http://www.example.com/messages.php?t=-1 union all select user()--
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/messages.php?t=-1 union all select version()--
http://www.example.com/messages.php?t=-1 union ll select database()--
http://www.example.com/messages.php?t=-1 union all select user()--
Solution / Fix
Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Graffiti Forums SQL Injection and HTML Injection Vulnerabilities
References:
References:
- Graffiti Forum Home Page (Blue Dojo)