RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
BID:41916
Info
RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
| Bugtraq ID: | 41916 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 23 2010 12:00AM |
| Updated: | Aug 03 2010 06:15PM |
| Credit: | Cyber-sec |
| Vulnerable: |
All Enthusiast Inc Photopost PHP Pro 4.1 All Enthusiast Inc PhotoPost PHP 4.6 All Enthusiast Inc PhotoPost PHP 4.4 All Enthusiast Inc PhotoPost PHP 4.0 |
| Not Vulnerable: | |
Discussion
RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
PhotoPost PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
PhotoPost PHP 4.0 through 4.6 are vulnerable.
RETIRED: This BID is retired because it is a duplicate; the vulnerability is described in BID 9994 (All Enthusiast Photopost PHP Pro Multiple Input Validation Vulnerabilities).
PhotoPost PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
PhotoPost PHP 4.0 through 4.6 are vulnerable.
RETIRED: This BID is retired because it is a duplicate; the vulnerability is described in BID 9994 (All Enthusiast Photopost PHP Pro Multiple Input Validation Vulnerabilities).
Exploit / POC
RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/photopost/index.php?cat=1 [sql injection]
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/photopost/index.php?cat=1 [sql injection]
Solution / Fix
RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: PhotoPost PHP 'index.php' SQL Injection Vulnerability
References:
References:
- PhotoPost PHP Homepage (All Enthusiast Inc)