Drupal Certificate Login Module SQL Injection Vulnerability

Bugtraq ID:	50093
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2011 12:00AM
Updated:	Oct 12 2011 12:00AM
Credit:	Jyri-Petteri �?�ZeiP�?� Paloposki
Vulnerable:	Moses Blumenstiel Certificate Login 6.X-2.2 Moses Blumenstiel Certificate Login 6.X-2.1
Not Vulnerable:	Moses Blumenstiel Certificate Login 6.X-2.3

Drupal Certificate Login Module SQL Injection Vulnerability

The Certificate Login module for Drupal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Certificate Login 6.x-2.3 are vulnerable.

Drupal Certificate Login Module SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Certificate Login Module SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for more details.


Moses Blumenstiel Certificate Login 6.X-2.2

• certificatelogin 6.x-2.3
  https://drupal.org/node/1306488

Moses Blumenstiel Certificate Login 6.X-2.1

• certificatelogin 6.x-2.3
  https://drupal.org/node/1306488

Drupal Certificate Login Module SQL Injection Vulnerability

References:

• Certificate Login Homepage (Moses Blumenstiel)
  
• Drupal Homepage (Drupal)
  
• SA-CONTRIB-2011-048 - Certificate Login SQL Injection (Drupal)