Xoops Remote SQL Injection Vulnerability
BID:3977
Info
Xoops Remote SQL Injection Vulnerability
| Bugtraq ID: | 3977 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0216 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 29 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | Posted to the BugTraq mailing list by Cabezon Aurelien <[email protected]>. |
| Vulnerable: |
Xoops Xoops 1.0 RC1 |
| Not Vulnerable: | |
Discussion
Xoops Remote SQL Injection Vulnerability
Xoops is open-source, freely available web portal software written in object-oriented PHP. It is back-ended by a MySQL database and will run on most Unix and Linux distributions.
The script userinfo.php fails to properly sanatize user input supplied to a SQL statement. It is possible to modify the SQL statement, possibly resulting in the disclosure of sensitive information. Error messages reported may leak additional information about the structure of the query.
Xoops is open-source, freely available web portal software written in object-oriented PHP. It is back-ended by a MySQL database and will run on most Unix and Linux distributions.
The script userinfo.php fails to properly sanatize user input supplied to a SQL statement. It is possible to modify the SQL statement, possibly resulting in the disclosure of sensitive information. Error messages reported may leak additional information about the structure of the query.
Exploit / POC
Xoops Remote SQL Injection Vulnerability
This vulnerability can be exploited with a web browser.
This vulnerability can be exploited with a web browser.
Solution / Fix
Xoops Remote SQL Injection Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.