LightBlog PHP Code Injection And Authentication Bypass Vulnerabilities

Bugtraq ID:	34730
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2009 12:00AM
Updated:	Apr 28 2009 07:06PM
Credit:	EgiX
Vulnerable:	PublicWarehouse.co.uk LightBlog 9.9.2 PublicWarehouse.co.uk LightBlog 9.8 PublicWarehouse.co.uk LightBlog 9.6 PublicWarehouse.co.uk LightBlog 9.5
Not Vulnerable:

LightBlog PHP Code Injection And Authentication Bypass Vulnerabilities

LightBlog is prone to a remote PHP code-injection vulnerability and an authentication-bypass vulnerability.

An attacker can exploit these issues to perform certain actions without authorization and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks may also be possible.

LightBlog 9.9.2 is vulnerable; other versions may also be affected.

LightBlog PHP Code Injection And Authentication Bypass Vulnerabilities

Attackers can exploit this issue via a browser.

The following exploit is available:

• /data/vulnerabilities/exploits/34730.php

LightBlog PHP Code Injection And Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

LightBlog PHP Code Injection And Authentication Bypass Vulnerabilities

References:

• LightBlog Homepage (PublicWarehouse.co.uk)
  
• LightBlog Homepage (Bailey Projects)