A Better Member-Based ASP Photo Gallery 'view.asp' SQL Injection Vulnerability

Bugtraq ID:	33693
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 09 2009 12:00AM
Updated:	Feb 12 2009 07:58PM
Credit:	BackDoor
Vulnerable:	Ontario Abandoned Places A Better Member-Based ASP Photo Gallery 0
Not Vulnerable:	Ontario Abandoned Places A Better Member-Based ASP Photo Gallery 1.2

A Better Member-Based ASP Photo Gallery 'view.asp' SQL Injection Vulnerability

A Better Member-Based ASP Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The issue affects versions prior to 1.2.

A Better Member-Based ASP Photo Gallery 'view.asp' SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/ipguardian/gallery/view.asp?entry=-1+union+select+0,title,2,creator,Longitude,5,pics+from+photos
r

A Better Member-Based ASP Photo Gallery 'view.asp' SQL Injection Vulnerability

Solution:
The vendor released version 1.2 to address this issue. Please see the references for more information.

A Better Member-Based ASP Photo Gallery 'view.asp' SQL Injection Vulnerability

References:

• A Better Member-Based ASP Photo Gallery (Ontario Abandoned Places)
  
• A Better Member-Based ASP Photo Gallery v1.2 (Ontario Abandoned Places)