WoltLab Burning Board Board.PHP SQL Injection Vulnerability
BID:5675
Info
WoltLab Burning Board Board.PHP SQL Injection Vulnerability
| Bugtraq ID: | 5675 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1505 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Discovery of this issue is credited to Cano2 <[email protected]>. |
| Vulnerable: |
Woltlab Burning Board 2.0 RC1 Woltlab Burning Board 2.0 beta 5 Woltlab Burning Board 2.0 beta 4 Woltlab Burning Board 2.0 beta 3 |
| Not Vulnerable: |
Woltlab Burning Board 2.0 RC2 |
Discussion
WoltLab Burning Board Board.PHP SQL Injection Vulnerability
WoltLab is prone to SQL injection attacks. This is due to insufficient sanitization of parameters handled by the board.php script, which may be supplied externally via the query string in a web request.
The logic of a SQL query made by the script may be modified, resulting in the potential for database corruption. It has been demonstrated that it is possible to exploit this condition to gain administrative privileges within the bulletin board system.
WoltLab is prone to SQL injection attacks. This is due to insufficient sanitization of parameters handled by the board.php script, which may be supplied externally via the query string in a web request.
The logic of a SQL query made by the script may be modified, resulting in the potential for database corruption. It has been demonstrated that it is possible to exploit this condition to gain administrative privileges within the bulletin board system.
References
WoltLab Burning Board Board.PHP SQL Injection Vulnerability
References:
References: