BoastMachine 'blog' Parameter SQL Injection Vulnerablity
BID:64278
Info
BoastMachine 'blog' Parameter SQL Injection Vulnerablity
| Bugtraq ID: | 64278 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2013 12:00AM |
| Updated: | Dec 13 2013 12:00AM |
| Credit: | Omar Kurt |
| Vulnerable: |
BoastMachine BoastMachine 3.1 |
| Not Vulnerable: | |
Discussion
BoastMachine 'blog' Parameter SQL Injection Vulnerablity
BoastMachine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
BoastMachine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
BoastMachine 'blog' Parameter SQL Injection Vulnerablity
An attacker can exploit this issue through a browser.
The following example URI is available:
http://example.com/user.php
(POST - blog)
blog='+(SELECT 1 FROM (SELECT SLEEP(25))A)+'
An attacker can exploit this issue through a browser.
The following example URI is available:
http://example.com/user.php
(POST - blog)
blog='+(SELECT 1 FROM (SELECT SLEEP(25))A)+'
References
BoastMachine 'blog' Parameter SQL Injection Vulnerablity
References:
References:
- boastMachine Homepage (boastMachine)
- XSS and SQL Injection Vulnerabilities in BoastMachine (Mavituna Security Ltd)