CCCP Community Clan Portal Multiple SQL Injection Vulnerabilities

Bugtraq ID:	34264
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 26 2009 12:00AM
Updated:	Mar 27 2009 03:46PM
Credit:	Stefan
Vulnerable:	CCCP Common Clan Portal CCCP Community Clan Portal 2.79
Not Vulnerable:	CCCP Common Clan Portal CCCP Community Clan Portal 2.80

CCCP Community Clan Portal Multiple SQL Injection Vulnerabilities

CCCP Community Code Portal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to CCCP Community Clan Portal 2.80 are vulnerable.

CCCP Community Clan Portal Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

CCCP Community Clan Portal Multiple SQL Injection Vulnerabilities

Solution:
The vendor has released fixes. Please contact the vendor for details.

CCCP Community Clan Portal Multiple SQL Injection Vulnerabilities

References:

• CCCP Common Clan Portal 2.80 Changelog (CCCP Common Clan Portal)
  
• CCCP Community Clan Portal Homepage (CCCP Community Clan Portal Homepage)