BOINC CVE-2013-2018 Multiple SQL Injection Vulnerabilities
BID:59568
Info
BOINC CVE-2013-2018 Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 59568 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2018 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2013 12:00AM |
| Updated: | Apr 29 2013 12:00AM |
| Credit: | Alyssa Milburn, Michael Vo�? |
| Vulnerable: |
University of California BOINC 6.12.34 University of California BOINC 6.10.58 University of California BOINC 5.10.20 University of California BOINC 7.0 |
| Not Vulnerable: | |
Discussion
BOINC CVE-2013-2018 Multiple SQL Injection Vulnerabilities
BOINC is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Note: These issues were previously covered in BID 59542 (BOINC Multiple Vulnerabilities), but have been given their own record for better documentation.
BOINC is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Note: These issues were previously covered in BID 59542 (BOINC Multiple Vulnerabilities), but have been given their own record for better documentation.
Exploit / POC
BOINC CVE-2013-2018 Multiple SQL Injection Vulnerabilities
An attacker can exploit these issues using a browser.
An attacker can exploit these issues using a browser.