MGB Multiple Cross Site Scripting and SQL Injection Vulnerabilities

Bugtraq ID:	54348
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 09 2012 12:00AM
Updated:	Jul 16 2012 10:00PM
Credit:	Stefan Schurtz
Vulnerable:
Not Vulnerable:

MGB Multiple Cross Site Scripting and SQL Injection Vulnerabilities

MGB is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MGB 0.6.9.1 is vulnerable; other versions may also be affected.

MGB Multiple Cross Site Scripting and SQL Injection Vulnerabilities

An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

The following example URIs are available:

http://www.example.com/mgb/admin/admin.php?action=delete&id=[SQLi]&p=1

http://www.example.com/mgb/index.php?p=1â??"</script><script>alert(document.cookie)</script> [XSS]

http://www.example.com/mgb/newentry.php [XSS]

MGB Multiple Cross Site Scripting and SQL Injection Vulnerabilities

References: