PunBB SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	32713
Class:	Input Validation Error
CVE:	CVE-2008-5433 CVE-2008-5434
Remote:	Yes
Local:	No
Published:	Dec 09 2008 12:00AM
Updated:	Dec 12 2008 05:51PM
Credit:	Stefan Esser
Vulnerable:	PunBB PunBB 1.3.1 PunBB PunBB 1.3
Not Vulnerable:	PunBB PunBB 1.3.2

PunBB SQL Injection and Cross Site Scripting Vulnerabilities

PunBB is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to PunBB 1.3.2 are vulnerable.

PunBB SQL Injection and Cross Site Scripting Vulnerabilities

An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

PunBB SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
The vendor released an update to address these issues. Please see the references for more information.


PunBB PunBB 1.3

• PunBB punbb-1.3.2.zip
  http://punbb.informer.com/download/punbb-1.3.2.zip

PunBB PunBB 1.3.1

• PunBB punbb-1.3.2.zip
  http://punbb.informer.com/download/punbb-1.3.2.zip

PunBB SQL Injection and Cross Site Scripting Vulnerabilities

References:

• PunBB 1.3.2 Release Notes (PunBB)
  
• PunBB Homepage (PunBB)